{"report_id":"9b1148c8-b83f-4836-a71c-6ce40fd59af5","version":0,"status":"done","tags":[],"date":"2026-10-08T02:06:19Z","url":{"schema":"https","addr":"aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2F%3Fviewmodel%3DReadMessageItem%26InternetMessageID%3D%253cSY1P282MB465506687EE7789F18E32B7CC08A952%2540SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%253e\u0026data=05%7C02%7Ccybersecurity%40iag.com.au%7Ce611f6a700114795d67908df24119ec5%7C7d847b009cb24e8b9f14fb58de4bcdde%7C1%7C0%7C639269330244563775%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=6xAKgBvpdA9JvPKDwW6b4EmTeGDrS6xebA121DbJrmY%3D\u0026reserved=0","fqdn":"aus01.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.96.156","port":0,"asn":8075,"as":"Microsoft Corporation","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"title":"Sign in to your account","dom":{"size":60342,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42961)","md5":"576e6b85f3ec232ac6beb569afee6cfa","sha1":"a3fd0cbe09f95946bee0bc5ef05da51054b3f4cb","sha256":"136100b72049f4743558b67069fc6797d2b4349587cb2faf57ae01e34f8c5ec2","sha512":"5db35bede213e5a262430da6b26b46d45dab2401b9013f902a02255c99d69f262703b2777bafe498c7f2f91bc37a54ca134ce27f1049fa7a857ddd644bf45aee","ssdeep":"1536:F1/2/r8GLG2o8/3/NNrgR/MU3W5Y9z7Z9Tjuokmap5vPoMKufP:7+D818/DrgRUU3n9Ha/AE","tlshash":"a5436de77b84281b8f424575d9be3b07967a58571884d8cce1cd848a1efebeb092f107","dom_hash":"domhash15086c0a41bb8407a5e7e08b46b82572","first_seen":"2026-10-08T02:06:23.568954Z","last_seen":"2026-10-08T02:06:23.568954Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2F%3Fviewmodel%3DReadMessageItem%26InternetMessageID%3D%253cSY1P282MB465506687EE7789F18E32B7CC08A952%2540SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%253e\u0026data=05%7C02%7Ccybersecurity%40iag.com.au%7Ce611f6a700114795d67908df24119ec5%7C7d847b009cb24e8b9f14fb58de4bcdde%7C1%7C0%7C639269330244563775%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=6xAKgBvpdA9JvPKDwW6b4EmTeGDrS6xebA121DbJrmY%3D\u0026reserved=0","fqdn":"aus01.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.96.156","port":0,"asn":8075,"as":"Microsoft Corporation","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T02:06:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"res.public.onecdn.static.microsoft","ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2023-05-05","domain_rank":930,"first_seen":"2024-03-21T01:17:57Z","last_seen":"2026-10-05T20:08:22.536687Z","alert_count":0,"request_count":7,"received_data":1100662,"sent_data":3563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login.microsoftonline.com","ip":{"addr":"20.190.177.147","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"domain_registered":"2002-07-09","domain_rank":52,"first_seen":"2017-02-19T08:06:40Z","last_seen":"2026-10-05T13:35:13.455537Z","alert_count":0,"request_count":2,"received_data":69651,"sent_data":3319,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aus01.safelinks.protection.outlook.com","ip":{"addr":"52.102.115.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-08-18","domain_rank":516026,"first_seen":"2017-05-08T00:24:24Z","last_seen":"2026-09-29T22:46:31.61703Z","alert_count":0,"request_count":1,"received_data":1152,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"outlook.office365.com","ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"2005-06-20","domain_rank":134,"first_seen":"2013-04-11T01:09:24Z","last_seen":"2026-10-07T22:11:19.741123Z","alert_count":0,"request_count":4,"received_data":35260,"sent_data":2774,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-10-25","domain_rank":5248,"first_seen":"2018-11-19T10:50:03Z","last_seen":"2026-10-07T21:29:34.350033Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":2293,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"83aaee9c503263aab2a7a6e03533b914","sha1":"ff58ff93efd47fb214fe6d9082453ac98212ed70","sha256":"fdf456efbc82d67f547d67a79c760a84064fa553a22829a2ede0d74b787f4f61","sha512":"0ed3bf11c9eb7c410894dfc026a08aa4fe7ff9327e7ebb46f4921d4e5d2f155c34ab1078f24a990a34eca8386c8054211c1c7037c52e1ec07a5ac8b1fa0d4732","ssdeep":"","tlshash":"6be02b359c61143048dd089d78afa7d83d316551a30ab110641cc9811470fcf8171fdb","size":418,"data":"","first_seen":"2024-12-04T17:01:08.332815Z","last_seen":"2026-10-08T02:06:23.604414Z","times_seen":11199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"14f9e4a3a48714993ad2175b9a8f3ccf","sha1":"0e17ed8f4c6579cd418c3cc6856ec1a1f8fecc5b","sha256":"63bbea332385910d99ed2edac3605fa2f7c7106eabd6b60a38fe14e92b5a74dc","sha512":"61803a1a49c82335e906ea49c3a3acbd6d24c0e64a5220edd6789f1e96d9d967f6da68dda88e49a093070931ffbbb90a40a67dfd3963a6991bbef778e2025009","ssdeep":"","tlshash":"5c21ed585728396322bb1341abe7b7063272538ef4004a84833e7340ac62e4bce07edb","size":1388,"data":"","first_seen":"2026-03-25T16:40:21.257911Z","last_seen":"2026-10-08T02:06:23.605525Z","times_seen":1198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.do.d1c99bef.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"26bb074a00846b7b1e7dc3d6d7d20141","sha1":"27be6b6a7f68a058fc57ebfb9ce7c9f870f679f8","sha256":"b5edd8959bb5c7d38cd837730a736ba9583a6b37cc2c72d7ec62832eb302f1ba","sha512":"4b8e5f3b4a421f09bbe9d67258efcd145537768f7b7ac6e32dc293a5b794eb4d39831b2435330a828beca2ea0eeeb9df35a68cfa370a044192d590783dbd0426","ssdeep":"96:7SEGIdcdnwY3NOcPvN5YoG4MYuanhi2vk6WN06lafnIR7qO2HLN:7SvId+jdZPIFingcARFirN","tlshash":"f2d195f17b527056c7c386ebf5034a01a26c6104a4bfcca4bb34dcd72d90a9499a3bb7","size":6406,"data":"","first_seen":"2026-08-21T22:02:44.065944Z","last_seen":"2026-10-08T02:06:23.594293Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.deep.runtime.baafd316.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b4cca3fc398d99eb6310bc1b608baa9","sha1":"e08b608100a2dfee06c3a75dc994c1b51eafd7a6","sha256":"d9df96e038c3c8176e4891f6b9c6bffc1d803f537bd3b44a3de7dce0c0cded6c","sha512":"723309cd224703d746af30d1be70e267e9f8b26426b4856c15a9538ea2fee0cc789b7482f50d9fea23055e847994be47cb879215d1d7582818f443a7fa35354f","ssdeep":"3072:dMI/x31twVU89eqFnaj0HR27QUW2xtYg0LfVOwhf5+BL47GGQ2aqr:C+FCNeqFnajJQUJx+/XUB3Cr","tlshash":"55248c1cbb1dd4da7ea009a6af4268fda840711f3d0e07d12ccdd7b910dee782236a59","size":219080,"data":"","first_seen":"2026-10-08T02:06:23.576085Z","last_seen":"2026-10-08T02:06:23.576085Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.deepindex.9669925a.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"11daa215b7f8f53a9aab120e3c563c94","sha1":"0a2f4a09fae668f054049ed8cdfcb708de9ad657","sha256":"47570166e5fd7669e745050b628c8808105276a4d7fd8acb0dec90f4ec752bd4","sha512":"ff22c78534b814727ab96ce571ace2606110960a16fa4787044b9d6a19d5509975d9ea3e0b4628f1b741f3288096d9dd3fcddcc942bf122e0d87807ea2999eef","ssdeep":"6144:RlwsnrprPVG61Im/7Z2JtOscSVS/5aLKNn+8CNTImVYUXbxTAN:RVrTyi8ShvF6ImVYn","tlshash":"0ec418da7282b0e753e301f9d02f404ae37a5955284d4828f264f9d6387946db2b3fbd","size":552731,"data":"","first_seen":"2026-10-08T02:06:23.57029Z","last_seen":"2026-10-08T02:06:23.57029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.do.18865634.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"921464104a40c7882dc05628b23fed57","sha1":"179e30310ed4ef28960a99ca99857749d461ab6e","sha256":"8f3f4e0f761a9ec220eddbddd0646c33ee92e549cb4879e10cd5db8a2719e113","sha512":"a8f5c8923537eacc2805b64aa824915b33b7bc844b65cfb4c9d6e365470de62c19865eafaefe91503b65b44cff5899420904288fc9752c8e678f6a4641e55df3","ssdeep":"768:lVTzuOHhuCnG3WrbzE4kd9yhFIRbPuoKCj:/huqYWrPE4kd9yh/1M","tlshash":"b2f219d67392b02fa3c905e8d0bb1116a3682899189f441cf2b8bad5397535d63e3f3d","size":36889,"data":"","first_seen":"2026-10-01T18:36:53.653087Z","last_seen":"2026-10-08T02:06:23.603109Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/deeplink/readimid/%3Canonymous%20code%3E","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"","is_inline":false,"md5":"a21de5d78224e5371250d4c5290dc6b8","sha1":"1a2c84c3cd3b69acf7a70d04cc3f2c829bfcce19","sha256":"6dffe06d2f6a574b1e9bb3c0798cf8ac0267fa605d04bb4f4228d52bc8a02fa7","sha512":"b09ad2a516abb2737279bc8f0c9dfafb2ef87492896b57f47a50aed631d285ce637b88d8cab57b8087aa13f7043772eb36a9df341a4f4b269947ae59fe51ea25","ssdeep":"","tlshash":"4311751392241a2212b25672733bc842a30a15111a3fdcdaba49c6222e04557d0feee8","size":1004,"data":"","first_seen":"2026-06-07T16:03:30.122688Z","last_seen":"2026-10-08T02:06:23.606162Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/deeplink/readimid/%3Canonymous%20code%3E","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"","is_inline":false,"md5":"b11059ab61bcdefee7d708eb15a124ec","sha1":"ca34588923f18e1c24cdafc135278963eec98ab0","sha256":"e621b1d4b7053e6f44c907d80196c377c04059f68f242ffda0a96dec58d613f7","sha512":"1d386ce47a6d29a4cbf9584292f47eb0ba532dad798ab1bf944fb4e691570ae31aec6b0675c257a8da2b9392767d81c2f65057066b192dd31a9c19b62a4edd21","ssdeep":"","tlshash":"e321205ed0a36263152051fe379ba891e26e452ab738c180b655c2007f9184ea3ffec8","size":1266,"data":"","first_seen":"2026-06-07T10:37:35.134112Z","last_seen":"2026-10-08T02:54:07.946375Z","times_seen":3197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.92328.do.7f8b7712.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1b12cd74f771eb1f4d6afd5e84d3628","sha1":"3f3962afe794b46edac826a2c68ec39295aa554a","sha256":"f32a2e268a366eff190bc032465b2beebf5ed94d2ba82c5e4cbfc915fa9572fa","sha512":"1ca7cdbe7d393a9e68f0711b5dd068f7d0d207107c436154f23d573c7444c766676a1dc76dc27314f59db47f3fcefb3c1be6a72d6adb7181faa04a7a8a47a528","ssdeep":"6144:CBrHKT3hlT4m00CQX9Y+gfEbcs0YqvpUMo2PZl:73KLpbZl","tlshash":"0b44c7c573ab7126e79d123ee8665200b3346688989e443dfbf434c63c56842b3afb75","size":257404,"data":"","first_seen":"2026-08-05T13:36:03.218706Z","last_seen":"2026-10-08T02:06:23.571976Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"navigator.clipboard.read() has been overridden with a no-op. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815733#c13 for details.","filename":"\u003canonymous code\u003e","line_number":22,"column_number":11},{"level":"info","text":"navigator.clipboard.read() has been overridden with a no-op. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815733#c13 for details.","filename":"\u003canonymous code\u003e","line_number":22,"column_number":11}]},"http":[{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.deepindex.9669925a.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.736Z","timestamp":1791425148736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.deepindex.9669925a.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 178025\r\nlast-modified: Wed, 07 Oct 2026 13:48:55 GMT\r\nx-ms-request-id: 41a86897-201e-0069-016c-56c6db000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nakamai-request-bc: [a=23.36.76.204,b=863593936,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337965d0\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=178025\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552731,"size_decoded":179381,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"11daa215b7f8f53a9aab120e3c563c94","sha1":"0a2f4a09fae668f054049ed8cdfcb708de9ad657","sha256":"47570166e5fd7669e745050b628c8808105276a4d7fd8acb0dec90f4ec752bd4","sha512":"ff22c78534b814727ab96ce571ace2606110960a16fa4787044b9d6a19d5509975d9ea3e0b4628f1b741f3288096d9dd3fcddcc942bf122e0d87807ea2999eef","ssdeep":"6144:RlwsnrprPVG61Im/7Z2JtOscSVS/5aLKNn+8CNTImVYUXbxTAN:RVrTyi8ShvF6ImVYn","tlshash":"0ec418da7282b0e753e301f9d02f404ae37a5955284d4828f264f9d6387946db2b3fbd","first_seen":"2026-10-08T02:06:23.57029Z","last_seen":"2026-10-08T02:06:23.57029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.92328.do.7f8b7712.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.935Z","timestamp":1791425148935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.92328.do.7f8b7712.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 60512\r\nlast-modified: Thu, 20 Aug 2026 18:35:32 GMT\r\nx-ms-request-id: e96064d5-901e-0053-34dc-30dca3000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nakamai-request-bc: [a=23.36.76.204,b=863594171,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337966bb\u0026TotalRTCDNTime=6\u0026CompressionType=br\u0026FileSize=60512\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=6, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257404,"size_decoded":61866,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1b12cd74f771eb1f4d6afd5e84d3628","sha1":"3f3962afe794b46edac826a2c68ec39295aa554a","sha256":"f32a2e268a366eff190bc032465b2beebf5ed94d2ba82c5e4cbfc915fa9572fa","sha512":"1ca7cdbe7d393a9e68f0711b5dd068f7d0d207107c436154f23d573c7444c766676a1dc76dc27314f59db47f3fcefb3c1be6a72d6adb7181faa04a7a8a47a528","ssdeep":"6144:CBrHKT3hlT4m00CQX9Y+gfEbcs0YqvpUMo2PZl:73KLpbZl","tlshash":"0b44c7c573ab7126e79d123ee8665200b3346688989e443dfbf434c63c56842b3afb75","first_seen":"2026-08-05T13:36:03.218706Z","last_seen":"2026-10-08T02:06:23.571976Z","times_seen":50,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/mail/pwa/v4/pngs/apple-touch-icon.png","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.958Z","timestamp":1791425148958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /assets/mail/pwa/v4/pngs/apple-touch-icon.png HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 15472\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Oct 2025 15:48:51 GMT\r\nx-ms-request-id: e4a46629-c01e-003c-3a5e-3cd650000000\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.127,b=956250971,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.7f4c2417.1791425148.38ff3b5b\u0026TotalRTCDNTime=3\u0026CompressionType=\u0026FileSize=15472\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15472,"size_decoded":16815,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"86a05116c92778b3513ba7d9cdee5e21","sha1":"1c7a6c1e1ddeb854bb5f4da98f665fabf2d7af75","sha256":"703e207bb1f322fd288bc4d30f6c4ce2d5f88f2ed126bd98f8e5535b84c67aa3","sha512":"538537ec04113ea48c45e24d55b1da46f8542609c8622acc22de09bc67c10a4525251a79b1ca12728a46b52eaec72f67d5164268e897ed9872012f5686fcb642","ssdeep":"384:Yvvv5WCo1/m0uzWuaIPvKOSXsPCr7jcU/3TEQDZhI7knq5km6u:Yvvv5WCSuzWuzKTbr7wU/3TEWZaogf6u","tlshash":"6e62d1028899caecb0eed19d5630c1f1d5c21c9b498bbd8e7854a4e944bdece1b8c7c3","first_seen":"2025-10-15T07:27:42.583994Z","last_seen":"2026-10-08T02:06:23.57289Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"ip":{"addr":"20.190.177.147","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T02:05:51.451Z","timestamp":1791425151451,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stamp2.login.microsoftonline.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 14 Aug 2026 03:43:54 GMT","end":"Sun, 22 Nov 2026 02:43:54 GMT"},"fingerprint":{"sha1":"A4:5D:53:11:55:FB:8D:65:45:78:47:1D:EC:8A:C9:68:04:3A:83:5F","sha256":"6C:D9:2F:6B:18:A7:99:CE:AB:DD:A8:20:7E:F0:2D:32:29:B2:AA:FC:74:AD:F5:91:94:72:02:CD:14:87:E7:50"}}},"request":{"raw":"GET /common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256 HTTP/1.1\r\nHost: login.microsoftonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nExpires: -1\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nCross-Origin-Opener-Policy-Report-Only: same-origin; report-to=\"coop-endpoint\"\r\nReporting-Endpoints: coop-endpoint=\"https://coop.msauth.net:443/api/coopReport?client_type=spa-msal\u0026client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026correlation_id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026sku=MsalJsBrowser\u0026version=5.12.0\u0026is1p=1\"\r\nLink: \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch,\u003chttps://aadcdn.msftauth.net\u003e; rel=dns-prefetch\r\nX-DNS-Prefetch-Control: on\r\nP3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nx-ms-request-id: 7c4f8148-0ee2-4aab-95b2-87f40bb92a00\r\nx-ms-ests-server: 2.1.25338.2 - WEULR1 ProdSlices\r\nx-ms-clitelem: 1,16000,0,,\r\nx-ms-srs: 1.P\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-hbfIMeq-GAEVDrL223xRyQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All\r\nX-XSS-Protection: 0\r\nSet-Cookie: buid=1.ATsAMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAA7AA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAA_-eTO_PaQU_HrqKb0M17x7M8BqrPXO1z5vDC5YEG8U4eCbMKiFiKphXBRQE2HIJxss82z8DbZ6-DXn2vbe04qLbMJe8Wg5jdgRM9iuigPuzSUAh2zi7qhNcPD2vBF_auDGMqV1uyMVt4Cd7mP4Aaw9gcMnDvYzRX1JQ5hzWOjq1NBtwr_iY7LKAAGv9UKyQDVqyhN1t-D8HANI0kqXrCMG95xlQkGLSijiWW8k_RVu03D_KVhlwLrM0kI-3jc__YIGOIrlDs65ea6Xbo_KbeG1mnoDo8nL8Yets1eakedO33j48oWADAFYQz5sKjFMDbmvMkWHlzUisKoiTP1iwaeSdwNcqzsQQdYlRn2RXgzjNFS-LOqBEj5OZNcPvCovzEfZeZZ_LT8iqplin4UWP6j7IkVnhSiUfniqbkg54AGKUWE4dv24aiggqoGyNSTwCf8JSabjY-ANSKcfHNqoSAGlMv-SX0wbcqVh3DvzPlcJoS-2joYfIlBt6SsvnP0hgT4FrCEZjPhvHWB5hUb82NhRi0CqmrTfAogGJnzchKeKXaeuh8jbQ4MN03AlgnYnD_rxi_xmLm6EfrQ04LE-8giPMajgVkhKt9vqwx6NGGr4agHa_8qDr1AJqYUtp1TMpD6mBYU5GPWC9hPIXa4BPZPgR6S0oio18cdbVl-2NcCysgAA; expires=Sat, 07-Nov-2026 02:05:53 GMT; path=/; secure; HttpOnly; SameSite=None\nesctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAANlR0Ru4LWm_leFzkQlmXQCgYhKu-AStNcTaQ0ZN1Z81Z9nBXk9zmympf2m1LgqXx6X72yz3Y9yTY1OUPYnJf31mQwbZsEN1maVv-SO6G9SUD5c6f_F_cL2lFWPWcyzFobE9Aie0ObagPO0caXDgBHiUF54VPPFayV98nx3PvkXjVFBjrriES6g_vEsbQUPMrifVqcv-oQdCUtEhDZqKVLtZj44xCKXdG3UKiyXrfENVGiWSqXUdB0Xx7T2w7MqYnN7s6avXIvimhESdr9Ztdc4Aaj3TehHe3LmIW_GaIRhSeVqlSA_yrkFt_0dUG_bCbD12jElI9MzQwJPDRcTKMyBIx9l2SZNUhTc4K-jUZWPo-d6OCrNr9kXL-A-zybXoiqdSfA_4luwPXVkqGdQ0V6CYFCTENtAUb8lCXA95VZ3BHFOlhNrUGC49-cEAwUIB1ZJChjLA9fY4QigR2sAN2lb0iZT34TzaluK79wG58zIEWCDoCQhwNJbiuAAKBWSPSqf2AFuwrHVou-tkxn40Hb0rGV6bovZUVSwZL6o3tufUApJIuKZwHWMlcTxORiEWPzsbo3gW6iUAuWzVHwMQn2wB95y9tb6H4-ADXCmBNAjj6D2gKEaUQc7U78KOVAw4qJX3V9fj7imv30RQ1q_98bOi2H85ZFEGoTkOKA27asFVOU7JljxcaFLiVmssc8tEDkBzKz8h7u-yW3-i7gC6utsLRnmVBoD_kUH4TRZSGo6ggAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nesctx-zEqoeuscZg=BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA5I5otQ1uqZGo1wHKBKhtd11bVq5t7rSlt8HEpzvtNTOBuAXRy12y3J-E-09m_gkKfctNGflQO8zgIx_O2RUt6vdMvBCuXfZcxKCMDqrWZoaL0PPS0bcBZhL3d4knRb6gZ2iZYLyw1TcMoYVl5G9zv4vKbYPeoYY1nOMGNrDLJBwD1O7z9HELcW4mSMXBiklgoP1S4I5ToOiXdGdLvxwLHDg-hF3MQIsor7ILKpBw8meVz4v1pEHu4SHWvNMBIvFzG96MGdVKnA8KHCs7QQtzyqNn7T7kObB3YgI-APut8v9zcVFq0kPaUhM7CCe5dnE4hicO-RjJ3qvF-jcOMpuGTOSOGaVs5jLVeWeQegSxQMdXBE93hVRYIhuLaHAo-5PPzVT5WWa5AHvjoE5tPOLawLZxVxgBuSltHQXQA_mEk0jt3q1aXxYdi2t7LO77opDDaYc5DGB5TW9nWGTZ1_8RB0XUeQyQ2ccQCmeJhZHloGEyXHvDxeS9qthXxhZp5V2SE7tmT5gGdvQMeVbJ4SNSfBsZz0tfBCLnuyyvTqHVGaz9975h0lmHaLLw3NyP49zz3yOJcEL4sZEeACAaRFv3_fvKLE7jBbHqFG0y0ORnlLBl_ODZ2pjGe7x3nxYzLLg8cOoccw91Hz0wAovJCu_vypciC3ptIm9Oxp1BvAzp4RPC7-_PJ1Wmjca308Mhqn1LIAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nfpc=AtB2IU7bbKxMlcOpcP1QQlTZRKGgAQAAAIHxWOIOAAAA; expires=Sat, 07-Nov-2026 02:05:53 GMT; path=/; secure; HttpOnly; SameSite=None\nx-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly\nstsservicecookie=estsfd; path=/; secure; samesite=none; httponly\r\nDate: Thu, 08 Oct 2026 02:05:53 GMT\r\nContent-Length: 23952\r\n\r\n","headers":null,"cookies":[{"name":"buid","value":"1.ATsAMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAA7AA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAA_-eTO_PaQU_HrqKb0M17x7M8BqrPXO1z5vDC5YEG8U4eCbMKiFiKphXBRQE2HIJxss82z8DbZ6-DXn2vbe04qLbMJe8Wg5jdgRM9iuigPuzSUAh2zi7qhNcPD2vBF_auDGMqV1uyMVt4Cd7mP4Aaw9gcMnDvYzRX1JQ5hzWOjq1NBtwr_iY7LKAAGv9UKyQDVqyhN1t-D8HANI0kqXrCMG95xlQkGLSijiWW8k_RVu03D_KVhlwLrM0kI-3jc__YIGOIrlDs65ea6Xbo_KbeG1mnoDo8nL8Yets1eakedO33j48oWADAFYQz5sKjFMDbmvMkWHlzUisKoiTP1iwaeSdwNcqzsQQdYlRn2RXgzjNFS-LOqBEj5OZNcPvCovzEfZeZZ_LT8iqplin4UWP6j7IkVnhSiUfniqbkg54AGKUWE4dv24aiggqoGyNSTwCf8JSabjY-ANSKcfHNqoSAGlMv-SX0wbcqVh3DvzPlcJoS-2joYfIlBt6SsvnP0hgT4FrCEZjPhvHWB5hUb82NhRi0CqmrTfAogGJnzchKeKXaeuh8jbQ4MN03AlgnYnD_rxi_xmLm6EfrQ04LE-8giPMajgVkhKt9vqwx6NGGr4agHa_8qDr1AJqYUtp1TMpD6mBYU5GPWC9hPIXa4BPZPgR6S0oio18cdbVl-2NcCysgAA","quoted":false,"path":"/","expires":"2026-11-07T02:05:53Z","raw_expires":"Sat, 07-Nov-2026 02:05:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"buid=1.ATsAMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAA7AA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAA_-eTO_PaQU_HrqKb0M17x7M8BqrPXO1z5vDC5YEG8U4eCbMKiFiKphXBRQE2HIJxss82z8DbZ6-DXn2vbe04qLbMJe8Wg5jdgRM9iuigPuzSUAh2zi7qhNcPD2vBF_auDGMqV1uyMVt4Cd7mP4Aaw9gcMnDvYzRX1JQ5hzWOjq1NBtwr_iY7LKAAGv9UKyQDVqyhN1t-D8HANI0kqXrCMG95xlQkGLSijiWW8k_RVu03D_KVhlwLrM0kI-3jc__YIGOIrlDs65ea6Xbo_KbeG1mnoDo8nL8Yets1eakedO33j48oWADAFYQz5sKjFMDbmvMkWHlzUisKoiTP1iwaeSdwNcqzsQQdYlRn2RXgzjNFS-LOqBEj5OZNcPvCovzEfZeZZ_LT8iqplin4UWP6j7IkVnhSiUfniqbkg54AGKUWE4dv24aiggqoGyNSTwCf8JSabjY-ANSKcfHNqoSAGlMv-SX0wbcqVh3DvzPlcJoS-2joYfIlBt6SsvnP0hgT4FrCEZjPhvHWB5hUb82NhRi0CqmrTfAogGJnzchKeKXaeuh8jbQ4MN03AlgnYnD_rxi_xmLm6EfrQ04LE-8giPMajgVkhKt9vqwx6NGGr4agHa_8qDr1AJqYUtp1TMpD6mBYU5GPWC9hPIXa4BPZPgR6S0oio18cdbVl-2NcCysgAA; expires=Sat, 07-Nov-2026 02:05:53 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"esctx","value":"PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAANlR0Ru4LWm_leFzkQlmXQCgYhKu-AStNcTaQ0ZN1Z81Z9nBXk9zmympf2m1LgqXx6X72yz3Y9yTY1OUPYnJf31mQwbZsEN1maVv-SO6G9SUD5c6f_F_cL2lFWPWcyzFobE9Aie0ObagPO0caXDgBHiUF54VPPFayV98nx3PvkXjVFBjrriES6g_vEsbQUPMrifVqcv-oQdCUtEhDZqKVLtZj44xCKXdG3UKiyXrfENVGiWSqXUdB0Xx7T2w7MqYnN7s6avXIvimhESdr9Ztdc4Aaj3TehHe3LmIW_GaIRhSeVqlSA_yrkFt_0dUG_bCbD12jElI9MzQwJPDRcTKMyBIx9l2SZNUhTc4K-jUZWPo-d6OCrNr9kXL-A-zybXoiqdSfA_4luwPXVkqGdQ0V6CYFCTENtAUb8lCXA95VZ3BHFOlhNrUGC49-cEAwUIB1ZJChjLA9fY4QigR2sAN2lb0iZT34TzaluK79wG58zIEWCDoCQhwNJbiuAAKBWSPSqf2AFuwrHVou-tkxn40Hb0rGV6bovZUVSwZL6o3tufUApJIuKZwHWMlcTxORiEWPzsbo3gW6iUAuWzVHwMQn2wB95y9tb6H4-ADXCmBNAjj6D2gKEaUQc7U78KOVAw4qJX3V9fj7imv30RQ1q_98bOi2H85ZFEGoTkOKA27asFVOU7JljxcaFLiVmssc8tEDkBzKz8h7u-yW3-i7gC6utsLRnmVBoD_kUH4TRZSGo6ggAA","quoted":false,"path":"/","domain":".login.microsoftonline.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAANlR0Ru4LWm_leFzkQlmXQCgYhKu-AStNcTaQ0ZN1Z81Z9nBXk9zmympf2m1LgqXx6X72yz3Y9yTY1OUPYnJf31mQwbZsEN1maVv-SO6G9SUD5c6f_F_cL2lFWPWcyzFobE9Aie0ObagPO0caXDgBHiUF54VPPFayV98nx3PvkXjVFBjrriES6g_vEsbQUPMrifVqcv-oQdCUtEhDZqKVLtZj44xCKXdG3UKiyXrfENVGiWSqXUdB0Xx7T2w7MqYnN7s6avXIvimhESdr9Ztdc4Aaj3TehHe3LmIW_GaIRhSeVqlSA_yrkFt_0dUG_bCbD12jElI9MzQwJPDRcTKMyBIx9l2SZNUhTc4K-jUZWPo-d6OCrNr9kXL-A-zybXoiqdSfA_4luwPXVkqGdQ0V6CYFCTENtAUb8lCXA95VZ3BHFOlhNrUGC49-cEAwUIB1ZJChjLA9fY4QigR2sAN2lb0iZT34TzaluK79wG58zIEWCDoCQhwNJbiuAAKBWSPSqf2AFuwrHVou-tkxn40Hb0rGV6bovZUVSwZL6o3tufUApJIuKZwHWMlcTxORiEWPzsbo3gW6iUAuWzVHwMQn2wB95y9tb6H4-ADXCmBNAjj6D2gKEaUQc7U78KOVAw4qJX3V9fj7imv30RQ1q_98bOi2H85ZFEGoTkOKA27asFVOU7JljxcaFLiVmssc8tEDkBzKz8h7u-yW3-i7gC6utsLRnmVBoD_kUH4TRZSGo6ggAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None"},{"name":"esctx-zEqoeuscZg","value":"BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA5I5otQ1uqZGo1wHKBKhtd11bVq5t7rSlt8HEpzvtNTOBuAXRy12y3J-E-09m_gkKfctNGflQO8zgIx_O2RUt6vdMvBCuXfZcxKCMDqrWZoaL0PPS0bcBZhL3d4knRb6gZ2iZYLyw1TcMoYVl5G9zv4vKbYPeoYY1nOMGNrDLJBwD1O7z9HELcW4mSMXBiklgoP1S4I5ToOiXdGdLvxwLHDg-hF3MQIsor7ILKpBw8meVz4v1pEHu4SHWvNMBIvFzG96MGdVKnA8KHCs7QQtzyqNn7T7kObB3YgI-APut8v9zcVFq0kPaUhM7CCe5dnE4hicO-RjJ3qvF-jcOMpuGTOSOGaVs5jLVeWeQegSxQMdXBE93hVRYIhuLaHAo-5PPzVT5WWa5AHvjoE5tPOLawLZxVxgBuSltHQXQA_mEk0jt3q1aXxYdi2t7LO77opDDaYc5DGB5TW9nWGTZ1_8RB0XUeQyQ2ccQCmeJhZHloGEyXHvDxeS9qthXxhZp5V2SE7tmT5gGdvQMeVbJ4SNSfBsZz0tfBCLnuyyvTqHVGaz9975h0lmHaLLw3NyP49zz3yOJcEL4sZEeACAaRFv3_fvKLE7jBbHqFG0y0ORnlLBl_ODZ2pjGe7x3nxYzLLg8cOoccw91Hz0wAovJCu_vypciC3ptIm9Oxp1BvAzp4RPC7-_PJ1Wmjca308Mhqn1LIAA","quoted":false,"path":"/","domain":".login.microsoftonline.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx-zEqoeuscZg=BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA5I5otQ1uqZGo1wHKBKhtd11bVq5t7rSlt8HEpzvtNTOBuAXRy12y3J-E-09m_gkKfctNGflQO8zgIx_O2RUt6vdMvBCuXfZcxKCMDqrWZoaL0PPS0bcBZhL3d4knRb6gZ2iZYLyw1TcMoYVl5G9zv4vKbYPeoYY1nOMGNrDLJBwD1O7z9HELcW4mSMXBiklgoP1S4I5ToOiXdGdLvxwLHDg-hF3MQIsor7ILKpBw8meVz4v1pEHu4SHWvNMBIvFzG96MGdVKnA8KHCs7QQtzyqNn7T7kObB3YgI-APut8v9zcVFq0kPaUhM7CCe5dnE4hicO-RjJ3qvF-jcOMpuGTOSOGaVs5jLVeWeQegSxQMdXBE93hVRYIhuLaHAo-5PPzVT5WWa5AHvjoE5tPOLawLZxVxgBuSltHQXQA_mEk0jt3q1aXxYdi2t7LO77opDDaYc5DGB5TW9nWGTZ1_8RB0XUeQyQ2ccQCmeJhZHloGEyXHvDxeS9qthXxhZp5V2SE7tmT5gGdvQMeVbJ4SNSfBsZz0tfBCLnuyyvTqHVGaz9975h0lmHaLLw3NyP49zz3yOJcEL4sZEeACAaRFv3_fvKLE7jBbHqFG0y0ORnlLBl_ODZ2pjGe7x3nxYzLLg8cOoccw91Hz0wAovJCu_vypciC3ptIm9Oxp1BvAzp4RPC7-_PJ1Wmjca308Mhqn1LIAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None"},{"name":"fpc","value":"AtB2IU7bbKxMlcOpcP1QQlTZRKGgAQAAAIHxWOIOAAAA","quoted":false,"path":"/","expires":"2026-11-07T02:05:53Z","raw_expires":"Sat, 07-Nov-2026 02:05:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"fpc=AtB2IU7bbKxMlcOpcP1QQlTZRKGgAQAAAIHxWOIOAAAA; expires=Sat, 07-Nov-2026 02:05:53 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"x-ms-gateway-slice","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly"},{"name":"stsservicecookie","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"stsservicecookie=estsfd; path=/; secure; samesite=none; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61274,"size_decoded":28704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42961), with CRLF, LF line terminators","md5":"47788f933bae0ecaf9013dad181ddea1","sha1":"023c571e9414576d461c19248eaa5fb9669e86a7","sha256":"5b49a6c262fdc74ce1d84aadf6f6fcede8f007b7e9a61a292e4f2bb4becc879a","sha512":"3ae823b4c55c206c51bc16df8806d5868bec436d891fd2f6603e75a89ab51198c90f29a1888a993e334b7d13b18420a9953e33d7dda03416c1b99e14eaecef71","ssdeep":"1536:Hz/2/r8GLG2o8/3/NNrgR/MU3W5Y92RZ9Tjuokmap5vPozQuTD8:T+D818/DrgRUU3n9Ia/Aq","tlshash":"82536de77b84282b8f424575c9be7b07967a54571884d8ccf1cd888a1efebea091f107","first_seen":"2026-10-08T02:06:23.574115Z","last_seen":"2026-10-08T02:06:23.574115Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2719,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":222,"receive":89,"ssl":2375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2F%3Fviewmodel%3DReadMessageItem%26InternetMessageID%3D%253cSY1P282MB465506687EE7789F18E32B7CC08A952%2540SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%253e\u0026data=05%7C02%7Ccybersecurity%40iag.com.au%7Ce611f6a700114795d67908df24119ec5%7C7d847b009cb24e8b9f14fb58de4bcdde%7C1%7C0%7C639269330244563775%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=6xAKgBvpdA9JvPKDwW6b4EmTeGDrS6xebA121DbJrmY%3D\u0026reserved=0","fqdn":"aus01.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.115.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T02:05:46.963Z","timestamp":1791425146963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cosmic.safelinks.protection.outlook.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 13 Sep 2026 20:27:19 GMT","end":"Tue, 30 Mar 2027 20:27:19 GMT"},"fingerprint":{"sha1":"0F:1D:EB:AD:28:31:D1:48:A0:47:AB:FF:CA:A3:B7:5B:51:86:3D:E1","sha256":"54:BE:2D:48:B9:AB:A5:39:2A:67:CE:FF:08:4B:14:5E:99:3D:EA:F0:92:17:79:18:0C:57:3E:6C:3A:C4:29:A1"}}},"request":{"raw":"GET /?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2F%3Fviewmodel%3DReadMessageItem%26InternetMessageID%3D%253cSY1P282MB465506687EE7789F18E32B7CC08A952%2540SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%253e\u0026data=05%7C02%7Ccybersecurity%40iag.com.au%7Ce611f6a700114795d67908df24119ec5%7C7d847b009cb24e8b9f14fb58de4bcdde%7C1%7C0%7C639269330244563775%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=6xAKgBvpdA9JvPKDwW6b4EmTeGDrS6xebA121DbJrmY%3D\u0026reserved=0 HTTP/1.1\r\nHost: aus01.safelinks.protection.outlook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncache-control: private\r\ncontent-length: 289\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://outlook.office365.com/owa/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-msedge-ref: MIRA: 2939e92c-cfaf-234b-e7b8-62c6894483c0 OS6P279CA0119 2026-10-08T02:05:47.056Z\r\nx-nanoproxy: 1\r\nx-aspnet-version: 4.0.30319\r\nrequest-id: 2939e92c-cfaf-234b-e7b8-62c6894483c0\r\nx-proxy-routingcorrectness: 1\r\nx-aspnetmvc-version: 5.3\r\nx-backendhttpstatus: 302\r\nx-content-type-options: nosniff\r\nx-proxy-backendserverstatus: 302\r\nx-robots-tag: noindex, nofollow\r\nx-safelinks-tracking-id: c4aab5d8-5a3c-41be-0b61-08df24e0ab79\r\nx-serverlat: 33\r\nx-servername: ME3AUS01WS0052\r\nalt-svc: h3=\":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nx-serverversion: 15.21.0496.015\r\nx-sl-geturlreputation-verdict: Good\r\nx-ua-compatible: IE=Edge\r\nx-feserver: OS6P279CA0119\r\nx-firsthopcafeefz: OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nms-cv: LOk5Ka/PSyPnuGLGiUSDwA.1\r\ndate: Thu, 08 Oct 2026 02:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":46,"connect":3,"send":0,"wait":930,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/owa/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T02:05:47.994Z","timestamp":1791425147994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C7:C1:9E:04:46:4D:74:4D:81:0E:F3:1A:24:C5:4F:C2:2A:79:09:C5","sha256":"7C:25:36:90:B4:0A:77:B8:87:7B:07:B9:62:10:47:F7:1A:17:98:10:EC:53:6F:40:C6:9D:53:4E:86:CE:97:BA"}}},"request":{"raw":"GET /owa/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-length: 0\r\nlocation: https://outlook.office365.com/mail/jsmvvmdeeplink/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e\u0026bO=4\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1\r\nrequest-id: 44f54d83-ee88-5806-3c6b-eb190a7f7616\r\nx-backend-begin: 2026-10-08T02:05:48.066\r\nx-calculatedbetarget: GV3SPRMB0004.SWEP280.PROD.OUTLOOK.COM\r\nserver-timing: total;dur=1, auth;dur=0, rpc;dur=0, uc;dur=0\r\nx-backend-end: 2026-10-08T02:05:48.068\r\nx-backendhttpstatus: 302\r\nx-besku: WCS7\r\nx-content-type-options: nosniff\r\nx-owa-diagnosticsinfo: 1;0;0;\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-owa-resulttype: Redirect\r\nx-proxy-backendserverstatus: 302\r\nx-proxy-routingcorrectness: 1\r\nx-responseorigin: OwaNetCore\r\nx-rum-validated: 1\r\nx-traceid: 001bd08d2074213076d6d9dff33b1938\r\nx-virtualaccount: True\r\nx-feserver: GVZP280CA0021\r\nx-firsthopcafeefz: GVX\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nms-cv: g031RIjuBlg8a+sZCn92Fg.1\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=GVX\u0026RemoteIP=195.64.118.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Owa\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\nset-cookie: ClientId=56EB8CAE9D1D4E448E3B9BB5414EDC8C; expires=Fri, 08 Oct 2027 02:05:48 GMT; path=/;SameSite=None; secure; samesite=none\nClientId=5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE; expires=Fri, 08 Oct 2027 02:05:48 GMT; path=/;SameSite=None; secure; samesite=none\nX-OWA-RedirectHistory=AuM0LGwBv8ahq-Ak3wg; expires=Thu, 08 Oct 2026 08:07:48 GMT; path=/;SameSite=None; secure; samesite=none; httponly\r\ndate: Thu, 08 Oct 2026 02:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"ClientId","value":"56EB8CAE9D1D4E448E3B9BB5414EDC8C","quoted":false,"path":"/","expires":"2027-10-08T02:05:48Z","raw_expires":"Fri, 08 Oct 2027 02:05:48 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ClientId=56EB8CAE9D1D4E448E3B9BB5414EDC8C; expires=Fri, 08 Oct 2027 02:05:48 GMT; path=/;SameSite=None; secure; samesite=none"},{"name":"ClientId","value":"5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE","quoted":false,"path":"/","expires":"2027-10-08T02:05:48Z","raw_expires":"Fri, 08 Oct 2027 02:05:48 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ClientId=5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE; expires=Fri, 08 Oct 2027 02:05:48 GMT; path=/;SameSite=None; secure; samesite=none"},{"name":"X-OWA-RedirectHistory","value":"AuM0LGwBv8ahq-Ak3wg","quoted":false,"path":"/","expires":"2026-10-08T08:07:48Z","raw_expires":"Thu, 08 Oct 2026 08:07:48 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"X-OWA-RedirectHistory=AuM0LGwBv8ahq-Ak3wg; expires=Thu, 08 Oct 2026 08:07:48 GMT; path=/;SameSite=None; secure; samesite=none; httponly"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":3,"connect":12,"send":0,"wait":17,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.deep.runtime.baafd316.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.733Z","timestamp":1791425148733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.deep.runtime.baafd316.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 124752\r\nlast-modified: Wed, 07 Oct 2026 13:48:54 GMT\r\nx-ms-request-id: 62506991-801e-0012-5e6c-568447000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.204,b=863593935,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337965cf\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=124752\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219080,"size_decoded":126161,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0b4cca3fc398d99eb6310bc1b608baa9","sha1":"e08b608100a2dfee06c3a75dc994c1b51eafd7a6","sha256":"d9df96e038c3c8176e4891f6b9c6bffc1d803f537bd3b44a3de7dce0c0cded6c","sha512":"723309cd224703d746af30d1be70e267e9f8b26426b4856c15a9538ea2fee0cc789b7482f50d9fea23055e847994be47cb879215d1d7582818f443a7fa35354f","ssdeep":"3072:dMI/x31twVU89eqFnaj0HR27QUW2xtYg0LfVOwhf5+BL47GGQ2aqr:C+FCNeqFnajJQUJx+/XUB3Cr","tlshash":"55248c1cbb1dd4da7ea009a6af4268fda840711f3d0e07d12ccdd7b910dee782236a59","first_seen":"2026-10-08T02:06:23.576085Z","last_seen":"2026-10-08T02:06:23.576085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":3,"receive":3,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/favicon.ico","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.960Z","timestamp":1791425148960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C7:C1:9E:04:46:4D:74:4D:81:0E:F3:1A:24:C5:4F:C2:2A:79:09:C5","sha256":"7C:25:36:90:B4:0A:77:B8:87:7B:07:B9:62:10:47:F7:1A:17:98:10:EC:53:6F:40:C6:9D:53:4E:86:CE:97:BA"}}},"request":{"raw":"GET /mail/favicon.ico HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ClientId=5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE; X-OWA-RedirectHistory=AuM0LGwBv8ahq-Ak3wg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ClientId","value":"5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE"},{"name":"X-OWA-RedirectHistory","value":"AuM0LGwBv8ahq-Ak3wg"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 9622\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 30 Sep 2026 08:28:23 GMT\r\naccept-ranges: bytes\r\netag: \"1dd50b5a8114816\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1\r\nrequest-id: 16cace24-7844-0f8c-d16b-58ebbe37a8f7\r\nx-proxy-backendserverstatus: 200\r\nx-calculatedbetarget: GV3P280MB1093.SWEP280.PROD.OUTLOOK.COM\r\nx-feserver: GVZP280CA0021\r\nx-besku: UNKNOWN\r\nx-backendhttpstatus: 200\r\nx-proxy-routingcorrectness: 1\r\nx-firsthopcafeefz: GVX\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nms-cv: JM7KFkR4jA/Ra1jrvjeo9w.1\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=GVX\u0026RemoteIP=195.64.118.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Default.mail\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":9622,"size_decoded":10677,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"280295798011b759195663d1e11c8edf","sha1":"dd714f7b7fd1b9677f3c08f75dd63abaff77833a","sha256":"4296d6875e5fb2b893c6868244303c3c38d1423e85c41ab85dfc7e1834ea898c","sha512":"621799515fefd77f98e594515640600c28225cc6f3a77a4dcf76f2d092de79198a7aad9c0d64e833606788c66b37c303e73d5302d16edaadc48a70fc6d3e1196","ssdeep":"192:jvLkFKgO15THwibYwIt+PXU+BX/C8T61T18:jvL7nTQUYx+PXjFa8Oy","tlshash":"7f124bc57f08e856cd5a2631e133da08a5bc2fc48ed80a0dbd9974096673dc7193e6eb","first_seen":"2025-10-08T10:55:37.894154Z","last_seen":"2026-10-08T02:06:23.577296Z","times_seen":1697,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","date":"2026-10-08T02:05:56.725Z","timestamp":1791425156725,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2FoauthRedirect.html\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=none\u0026nonce=01a11942-784c-7761-9c03-a54587c3bce9\u0026state=eyJpZCI6IjAxYTExOTQyLTc4NGItNzIxOS04MmQwLTBkOTk5MmIyOTc3MyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CeyJtc2FsVmVyc2lvbiI6IjUuMTIuMCJ9%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=mfHU4ARrk4ZQ40Zxcisf4yK2areOsW6041racUHagG8\u0026code_challenge_method=S256","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"ip":{"addr":"20.231.128.67","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:49.050Z","timestamp":1791425149050,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /organizations/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2FoauthRedirect.html\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=none\u0026nonce=01a11942-784c-7761-9c03-a54587c3bce9\u0026state=eyJpZCI6IjAxYTExOTQyLTc4NGItNzIxOS04MmQwLTBkOTk5MmIyOTc3MyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CeyJtc2FsVmVyc2lvbiI6IjUuMTIuMCJ9%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=mfHU4ARrk4ZQ40Zxcisf4yK2areOsW6041racUHagG8\u0026code_challenge_method=S256 HTTP/1.1\r\nHost: login.microsoftonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nCache-Control: no-store, no-cache\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nExpires: -1\r\nLocation: https://outlook.office365.com/mail/oauthRedirect.html#error=login_required\u0026error_description=AADSTS50058%3a+A+silent+sign-in+request+was+sent+but+no+user+is+signed+in.+The+cookies+used+to+represent+the+user%27s+session+were+not+sent+in+the+request+to+Azure+AD.+This+can+happen+if+the+user+is+using+Internet+Explorer+or+Edge%2c+and+the+web+app+sending+the+silent+sign-in+request+is+in+different+IE+security+zone+than+the+Azure+AD+endpoint+(login.microsoftonline.com).+Trace+ID%3a+842e0371-39c0-41eb-9795-0afd4d215f00+Correlation+ID%3a+85b4fcfa-db31-6e4d-c7d7-86f30a20f0da+Timestamp%3a+2026-10-08+02%3a05%3a51Z\u0026error_uri=https%3a%2f%2flogin.microsoftonline.com%2ferror%3fcode%3d50058\u0026state=eyJpZCI6IjAxYTExOTQyLTc4NGItNzIxOS04MmQwLTBkOTk5MmIyOTc3MyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7ceyJtc2FsVmVyc2lvbiI6IjUuMTIuMCJ9%7caHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026clientdata=e%7c50058%7c%7cmicrosoftonline.com%7cnone\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nx-ms-clientdata: e|50058||microsoftonline.com|none\r\nP3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nx-ms-request-id: 842e0371-39c0-41eb-9795-0afd4d215f00\r\nx-ms-ests-server: 2.1.25338.2 - WEULR1 ProdSlices\r\nx-ms-clitelem: 1,50058,0,,\r\nx-ms-srs: 1.P\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-H2VzLQ8n88iSH_zxrMhPlg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All\r\nX-XSS-Protection: 0\r\nSet-Cookie: buid=1.AQ8AMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAAPAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAyJm3-D_AW0-QkM4Hjhez-yrRHZmGj1GUC21cSu7bKvmylHeh6dc33dfihWZGI48Pe8YxBYX51rLzxS3kvIFvFRcfzqT1TW30C_1jhtItswZNzMSbFtW14MCxAqiI5c_HFizDDGojQg0LNeRZ1lnw511kAisVM3_lFvZErhkU_-WFJmGwqnCE6BXqqv0DdE7AXmMCsRJx6dm46ywXqdRYcRJ-NxBLwEJ7fHOxJmGiUoioBqHBo5L396ECR_cgpbPOi7mGAljpQahX7iXAukYliH06w95KLhsS94C0XFmy6OmFQxvg6oo3qLgo3dtCY-MQSgMOzK5VMI5RObNl7-YTyCUIWdlcu1PUq91ZwyxkjW2FPePYAZxR2i0a7fLPEE0Wk9nyrqNsLR38ty7d1ORKkMKT3vsCEDkng0iBetTJ1uuCHDcYzNsSLzbExbmH_j9ivkNG5N3bPqr87zF_rDUdRQ3o9sdxrDhMTQ5mgEjzEL1CV6zDR8AMkCG9XgWjtAT1wTRbmF05cuuWco3AfZ1n_AOjGqiTC7ftKvoaD-KUgPY5w9-nPfUt1AHXvpxDAr-UMwdAGufxKIpV1ZZqApKdBVpZ0lLPCXVkfg09HvsEh4biYe-eYB-427vbPp86qyL_C2IkLkglZPQp_vLFntliUYMbf_1mXyyDiFyCYbEOgAMgAA; expires=Sat, 07-Nov-2026 02:05:51 GMT; path=/; secure; HttpOnly; SameSite=None\nfpc=AmVhpcT7ssdLmNnHiDo_oUPZRKGgAQAAAH_xWOIOAAAA; expires=Sat, 07-Nov-2026 02:05:51 GMT; path=/; secure; HttpOnly; SameSite=None\nx-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly\nstsservicecookie=estsfd; path=/; secure; samesite=none; httponly\r\nDate: Thu, 08 Oct 2026 02:05:51 GMT\r\nContent-Length: 1214\r\n\r\n","headers":null,"cookies":[{"name":"buid","value":"1.AQ8AMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAAPAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAyJm3-D_AW0-QkM4Hjhez-yrRHZmGj1GUC21cSu7bKvmylHeh6dc33dfihWZGI48Pe8YxBYX51rLzxS3kvIFvFRcfzqT1TW30C_1jhtItswZNzMSbFtW14MCxAqiI5c_HFizDDGojQg0LNeRZ1lnw511kAisVM3_lFvZErhkU_-WFJmGwqnCE6BXqqv0DdE7AXmMCsRJx6dm46ywXqdRYcRJ-NxBLwEJ7fHOxJmGiUoioBqHBo5L396ECR_cgpbPOi7mGAljpQahX7iXAukYliH06w95KLhsS94C0XFmy6OmFQxvg6oo3qLgo3dtCY-MQSgMOzK5VMI5RObNl7-YTyCUIWdlcu1PUq91ZwyxkjW2FPePYAZxR2i0a7fLPEE0Wk9nyrqNsLR38ty7d1ORKkMKT3vsCEDkng0iBetTJ1uuCHDcYzNsSLzbExbmH_j9ivkNG5N3bPqr87zF_rDUdRQ3o9sdxrDhMTQ5mgEjzEL1CV6zDR8AMkCG9XgWjtAT1wTRbmF05cuuWco3AfZ1n_AOjGqiTC7ftKvoaD-KUgPY5w9-nPfUt1AHXvpxDAr-UMwdAGufxKIpV1ZZqApKdBVpZ0lLPCXVkfg09HvsEh4biYe-eYB-427vbPp86qyL_C2IkLkglZPQp_vLFntliUYMbf_1mXyyDiFyCYbEOgAMgAA","quoted":false,"path":"/","expires":"2026-11-07T02:05:51Z","raw_expires":"Sat, 07-Nov-2026 02:05:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"buid=1.AQ8AMe_N-B6jSkuT5F9XHpElWiC_mZE_oQdBhdwCEUeH70gAAAAPAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAyJm3-D_AW0-QkM4Hjhez-yrRHZmGj1GUC21cSu7bKvmylHeh6dc33dfihWZGI48Pe8YxBYX51rLzxS3kvIFvFRcfzqT1TW30C_1jhtItswZNzMSbFtW14MCxAqiI5c_HFizDDGojQg0LNeRZ1lnw511kAisVM3_lFvZErhkU_-WFJmGwqnCE6BXqqv0DdE7AXmMCsRJx6dm46ywXqdRYcRJ-NxBLwEJ7fHOxJmGiUoioBqHBo5L396ECR_cgpbPOi7mGAljpQahX7iXAukYliH06w95KLhsS94C0XFmy6OmFQxvg6oo3qLgo3dtCY-MQSgMOzK5VMI5RObNl7-YTyCUIWdlcu1PUq91ZwyxkjW2FPePYAZxR2i0a7fLPEE0Wk9nyrqNsLR38ty7d1ORKkMKT3vsCEDkng0iBetTJ1uuCHDcYzNsSLzbExbmH_j9ivkNG5N3bPqr87zF_rDUdRQ3o9sdxrDhMTQ5mgEjzEL1CV6zDR8AMkCG9XgWjtAT1wTRbmF05cuuWco3AfZ1n_AOjGqiTC7ftKvoaD-KUgPY5w9-nPfUt1AHXvpxDAr-UMwdAGufxKIpV1ZZqApKdBVpZ0lLPCXVkfg09HvsEh4biYe-eYB-427vbPp86qyL_C2IkLkglZPQp_vLFntliUYMbf_1mXyyDiFyCYbEOgAMgAA; expires=Sat, 07-Nov-2026 02:05:51 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"fpc","value":"AmVhpcT7ssdLmNnHiDo_oUPZRKGgAQAAAH_xWOIOAAAA","quoted":false,"path":"/","expires":"2026-11-07T02:05:51Z","raw_expires":"Sat, 07-Nov-2026 02:05:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"fpc=AmVhpcT7ssdLmNnHiDo_oUPZRKGgAQAAAH_xWOIOAAAA; expires=Sat, 07-Nov-2026 02:05:51 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"x-ms-gateway-slice","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly"},{"name":"stsservicecookie","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"stsservicecookie=estsfd; path=/; secure; samesite=none; httponly"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/jsmvvmdeeplink/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e\u0026bO=4","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T02:05:48.086Z","timestamp":1791425148086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C7:C1:9E:04:46:4D:74:4D:81:0E:F3:1A:24:C5:4F:C2:2A:79:09:C5","sha256":"7C:25:36:90:B4:0A:77:B8:87:7B:07:B9:62:10:47:F7:1A:17:98:10:EC:53:6F:40:C6:9D:53:4E:86:CE:97:BA"}}},"request":{"raw":"GET /mail/jsmvvmdeeplink/?viewmodel=ReadMessageItem\u0026InternetMessageID=%3cSY1P282MB465506687EE7789F18E32B7CC08A952%40SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3e\u0026bO=4 HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ClientId=5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE; X-OWA-RedirectHistory=AuM0LGwBv8ahq-Ak3wg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ClientId","value":"5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE"},{"name":"X-OWA-RedirectHistory","value":"AuM0LGwBv8ahq-Ak3wg"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 0\r\nexpires: -1\r\nlocation: /mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1,1\r\nrequest-id: 218d55d0-0ee5-5fb4-b172-a029a84e149c\r\nx-calculatedfetarget: BE1P281CU029.internal.outlook.com\r\nms-cv: 0FWNIeUOtF+xcqApqE4UnA.1.1\r\nx-besku: UNKNOWN\r\nx-backendhttpstatus: 302,302\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=GVX\u0026RemoteIP=195.64.118.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Default.mail\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\nx-bepartition: CLSWEP280MMX01\r\nx-calculatedbetarget: MM0P280MB2088.SWEP280.PROD.OUTLOOK.COM\r\nx-clique: CLSWEP280MMX01\r\nx-content-type-options: nosniff\r\nx-feefzinfo: SXF\r\nx-feserver: GVZP280CA0021\r\nx-proxy-backendserverstatus: 302\r\nx-proxy-routingcorrectness: 1\r\nx-web-server-version: 26.9.28.2\r\nx-firsthopcafeefz: GVX\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ndate: Thu, 08 Oct 2026 02:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"40.104.62.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T02:05:48.133Z","timestamp":1791425148133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C7:C1:9E:04:46:4D:74:4D:81:0E:F3:1A:24:C5:4F:C2:2A:79:09:C5","sha256":"7C:25:36:90:B4:0A:77:B8:87:7B:07:B9:62:10:47:F7:1A:17:98:10:EC:53:6F:40:C6:9D:53:4E:86:CE:97:BA"}}},"request":{"raw":"GET /mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ClientId=5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE; X-OWA-RedirectHistory=AuM0LGwBv8ahq-Ak3wg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ClientId","value":"5A8EFA0B25BE4A4A8D7DDCE4B8E1C2FE"},{"name":"X-OWA-RedirectHistory","value":"AuM0LGwBv8ahq-Ak3wg"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1,1\r\nrequest-id: f6073e90-1c09-e78f-95ea-4894d3d8d2d6\r\nx-calculatedfetarget: BE1P281CU026.internal.outlook.com\r\nx-client-version: 20261002003.07\r\ncontent-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-MkdLTorAU4UuN38UkZIoVQ==' *.res.office365.com *.fluidpreview.office.net shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' *.yammer.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.yammer.com *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com onedrive.cloud.microsoft my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com editor.svc.cloud.microsoft *.clarity.ms 'self' login.microsoftonline.com outlook.office365.com teams.microsoft.com *.teams.microsoft.com *.yammer.com *.svc.ms *.licdn.com o365auditrealtimeingestion.manage.office.com o365auditrealtimeingestion.manage.office.com:445 files.yammerusercontent.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net 3pidentity.svc.cloud.microsoft; base-uri browser.pipe.aria.microsoft.com 'self'; form-action 'self' *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com m365copilotapp.svc.cloud.microsoft *.sharepoint.de; object-src *.office.net 'self' blob: attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.yammer.com *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' *.yammer.com *.engage.cloud.microsoft attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy owaMeControlTrustedTypesPolicy ast-policy domPurifyHTML emptyStringPolicyHTML nativeSanitizerTrustedTypesPolicy @fluidx/loop#generic-cdn-codeloader-bundle @fluidx/loop#html-canvas-container wordxmlBypassOfficeAddIns 'allow-duplicates'; report-uri https://cspv2.core.microsoft/report/ec96f066-bd3b-47e3-82c7-01af626dd71a/OutlookWeb-Mail-PROD; upgrade-insecure-requests;\r\nx-clique: CLSWEP280MMX00\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nms-cv: kD4H9gkcj+eV6kiU09jS1g.1.1\r\nlink: \u003chttps://res.public.onecdn.static.microsoft/\u003e; rel=\"preconnect\"\r\norigin-trial: AgxVPru/jRUesV9k7Pn5/osZuJ4g/2sL76bPZejtrjsFofGlatTE4sbavhadrkBNum06aL1ghYYaKcX04fiRdAIAAABveyJvcmlnaW4iOiJodHRwczovL29mZmljZS5jb206NDQzIiwiZmVhdHVyZSI6IkxvbmdBbmltYXRpb25GcmFtZVRpbWluZyIsImV4cGlyeSI6MTcxNjk0MDc5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nreferrer-policy: no-referrer\r\nx-app-name: MailDeep\r\nx-backendhttpstatus: 200,200\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=GVX\u0026RemoteIP=195.64.118.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Default.mail\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\nx-bepartition: CLSWEP280MMX00\r\nx-besku: UNKNOWN\r\nx-calculatedbetarget: MM0P280MB0582.SWEP280.PROD.OUTLOOK.COM\r\nx-content-type-options: nosniff\r\nx-feefzinfo: SXF\r\nx-feserver: GVZP280CA0021\r\nx-proxy-backendserverstatus: 200\r\nx-proxy-routingcorrectness: 1\r\nx-web-server-version: 26.9.28.2\r\nx-firsthopcafeefz: GVX\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ndate: Thu, 08 Oct 2026 02:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":12304,"size_decoded":14265,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (12304), with no line terminators","md5":"95d22b30a5d8354f5fe65bbd49f4a284","sha1":"f0c3b07b695afddbf1ee0c3a8a81808eeb84ac0a","sha256":"483db2db9324884a48fd84b8e70377c9650f3d0f098b58f526d7ef4938d5f49c","sha512":"3b1c1672387b872c3494db07d2f8ce6c11380ea5566b29f811b4923e16b07dc7ae15b0ffd9040a055e2ec86694640f4460cd8d243db53f01a11ae81cfaeb7b0a","ssdeep":"192:nkYZZ4vijFra6xFhHU6SICkElMpJPTBdrubnwNKx3PDtkt60:nRZ4vijF+WFh04PtcbfAt","tlshash":"4742f9515844503efb17e266a1e7ff0d3a39a187fc134a6c639d62ec0dc0ed84a576a2","first_seen":"2026-10-08T02:06:23.592431Z","last_seen":"2026-10-08T02:06:23.592431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/framework/microsoft.svg","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.746Z","timestamp":1791425148746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /assets/framework/microsoft.svg HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 1405\r\nlast-modified: Wed, 30 Aug 2023 00:34:56 GMT\r\nx-ms-request-id: fd4b084c-801e-002d-1c6d-a24ce4000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nakamai-request-bc: [a=23.36.76.204,b=863593949,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337965dd\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=1405\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/svg+xml\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202,"size_decoded":2715,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d2b8f25545a2894e2721e9fe528e34c","sha1":"d0dae76f4bf5c04acd5fcdf1bcb12908099e328c","sha256":"797bda35d13e5130fe5a14e0069c31b46ec1af6ea47f2d300309803bb4d2608c","sha512":"fe1f84af0ba1100b2a90ee6fbfbd3763ef34d1a3bf045345538302ece7d37eaadc9a9cd0e09c2030e62b13a55e118a2417b27f14336c271758bfb3e256906385","ssdeep":"","tlshash":"bf612eaa4204cbae1987c29cdf3ae865170f05eaf2aa22d958ffc77120975c8dd46814","first_seen":"2023-10-02T23:14:06Z","last_seen":"2026-10-08T02:06:23.593651Z","times_seen":8018,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.do.d1c99bef.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.939Z","timestamp":1791425148939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.71719.do.d1c99bef.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 2380\r\nlast-modified: Wed, 19 Aug 2026 03:54:47 GMT\r\nx-ms-request-id: d05eab7b-601e-0025-02b0-2f56eb000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nakamai-request-bc: [a=23.36.76.204,b=863594175,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337966bf\u0026TotalRTCDNTime=6\u0026CompressionType=br\u0026FileSize=2380\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=6, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6406,"size_decoded":3732,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6406), with no line terminators","md5":"26bb074a00846b7b1e7dc3d6d7d20141","sha1":"27be6b6a7f68a058fc57ebfb9ce7c9f870f679f8","sha256":"b5edd8959bb5c7d38cd837730a736ba9583a6b37cc2c72d7ec62832eb302f1ba","sha512":"4b8e5f3b4a421f09bbe9d67258efcd145537768f7b7ac6e32dc293a5b794eb4d39831b2435330a828beca2ea0eeeb9df35a68cfa370a044192d590783dbd0426","ssdeep":"96:7SEGIdcdnwY3NOcPvN5YoG4MYuanhi2vk6WN06lafnIR7qO2HLN:7SvId+jdZPIFingcARFirN","tlshash":"f2d195f17b527056c7c386ebf5034a01a26c6104a4bfcca4bb34dcd72d90a9499a3bb7","first_seen":"2026-08-21T22:02:44.065944Z","last_seen":"2026-10-08T02:06:23.594293Z","times_seen":45,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.do.18865634.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.131","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/mail/deeplink/readimid/PFNZMVAyODJNQjQ2NTUwNjY4N0VFNzc4OUYxOEUzMkI3Q0MwOEE5NTJAU1kxUDI4Mk1CNDY1NTA2LkFVU1AyODIuUFJPRC5PVVRMT09LLkNPTT4%3d?InternetMessageID=%3CSY1P282MB465506687EE7789F18E32B7CC08A952@SY1P282MB465506.AUSP282.PROD.OUTLOOK.COM%3E","date":"2026-10-08T02:05:48.942Z","timestamp":1791425148942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 05 Oct 2026 02:43:27 GMT","end":"Wed, 21 Apr 2027 02:43:27 GMT"},"fingerprint":{"sha1":"F5:2B:E4:A7:89:29:8F:3B:6A:48:27:4F:1F:0A:88:81:20:C6:C2:ED","sha256":"7C:22:E1:20:1A:F3:CE:2F:D9:1F:F4:C3:7A:34:78:A3:3F:3F:AC:3B:50:B4:D5:B6:1E:CE:C5:DF:01:25:38:B2"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.MsalAuth.do.18865634.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://outlook.office365.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 12551\r\nlast-modified: Wed, 23 Sep 2026 13:31:02 GMT\r\nx-ms-request-id: b1322277-201e-001b-7a6e-4bc194000000\r\ncontent-encoding: br\r\ncache-control: max-age=31536000\r\ndate: Thu, 08 Oct 2026 02:05:48 GMT\r\nakamai-request-bc: [a=23.36.76.204,b=863594184,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.cc4c2417.1791425148.337966c8\u0026TotalRTCDNTime=2\u0026CompressionType=br\u0026FileSize=12551\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: date,X-Cdn-Provider,X-Ms-Request-Id,Akamai-Request-BC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36889,"size_decoded":13905,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36889), with no line terminators","md5":"921464104a40c7882dc05628b23fed57","sha1":"179e30310ed4ef28960a99ca99857749d461ab6e","sha256":"8f3f4e0f761a9ec220eddbddd0646c33ee92e549cb4879e10cd5db8a2719e113","sha512":"a8f5c8923537eacc2805b64aa824915b33b7bc844b65cfb4c9d6e365470de62c19865eafaefe91503b65b44cff5899420904288fc9752c8e678f6a4641e55df3","ssdeep":"768:lVTzuOHhuCnG3WrbzE4kd9yhFIRbPuoKCj:/huqYWrPE4kd9yh/1M","tlshash":"b2f219d67392b02fa3c905e8d0bb1116a3682899189f441cf2b8bad5397535d63e3f3d","first_seen":"2026-10-01T18:36:53.653087Z","last_seen":"2026-10-08T02:06:23.603109Z","times_seen":7,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","date":"2026-10-08T02:05:54.226Z","timestamp":1791425154226,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzVCgFbeIBqYh0ZIsL8czw2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","date":"2026-10-08T02:05:54.228Z","timestamp":1791425154228,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/js/ConvergedLogin_PCore_IzVCgFbeIBqYh0ZIsL8czw2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Foutlook.office365.com%2Fmail%2F\u0026client-request-id=85b4fcfa-db31-6e4d-c7d7-86f30a20f0da\u0026response_mode=fragment\u0026client_info=1\u0026clidata=1\u0026prompt=select_account\u0026nonce=01a11942-81b9-7895-a959-79062e1d17ee\u0026state=eyJpZCI6IjAxYTExOTQyLTgxYjgtN2YwZC05MjZjLWUwMzY1YWRkMDRlMSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZTM2NS5jb20vbWFpbC9kZWVwbGluay9yZWFkaW1pZC9QRk5aTVZBeU9ESk5RalEyTlRVd05qWTROMFZGTnpjNE9VWXhPRVV6TWtJM1EwTXdPRUU1TlRKQVUxa3hVREk0TWsxQ05EWTFOVEEyTGtGVlUxQXlPREl1VUZKUFJDNVBWVlJNVDA5TExrTlBUVDQlM2Q_SW50ZXJuZXRNZXNzYWdlSUQ9JTNDU1kxUDI4Mk1CNDY1NTA2Njg3RUU3Nzg5RjE4RTMyQjdDQzA4QTk1MiU0MFNZMVAyODJNQjQ2NTUwNi5BVVNQMjgyLlBST0QuT1VUTE9PSy5DT00lM0U\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=5.12.0\u0026response_type=code\u0026code_challenge=UpGelk28u5YHYXPfzTtSWvVDDlxN1-gkRFbVpdmrhPA\u0026code_challenge_method=S256","date":"2026-10-08T02:05:54.229Z","timestamp":1791425154229,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T03:41:02.385097Z","times_seen":18931118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}