{"report_id":"aee44c6f-f3c4-4597-b869-e2931e9007c1","version":6,"status":"done","tags":[],"date":"2026-04-02T13:53:23Z","url":{"schema":"https","addr":"urldefense.com/v3/__https://emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=__;!!OrxsNty6D4my!46SkFVZVgOzfYCwKkvtfQv7WilwBk94vfDGaYe9oaTTV7kiLAZ2hi5oFJ2HYXnvXFoL6D40s-e1YcPeLSMHZ-vyi$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.6.56.188","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"info.microsoft.com/index.php/email/emailWebview?email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"title":"Microsoft","dom":{"size":17507,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (960)","md5":"844bb8a0b6312b81c8c4dc8f84dd2a5b","sha1":"ce319710637b6d3489b21dcf5a605dfbfef82a26","sha256":"ce7d2d773727dedac0ac009935c0f3f8e0b8b6a6d0721cda2bab43967f9bf3fb","sha512":"3d16618ecf748553bc1e06948a481cb457122e9384bd22ac9a1afc4755efbe7ed91cadddb4b2179a904601ccffbbd1df57db4b42a12301d25b0b99fad29bd6aa","ssdeep":"192:Tcm1LbLJzWwMwNoEId46LDPVivP0XDq0Okrd+tT677c1X4AL7d4+UIPr34ac2Prg:DpSYTHI6qzHSoarDoKKBLlh","tlshash":"2072c512d780253e885150bde2315ea8e3ad4647db0245f8f5aeb13be34eeb649217fc","dom_hash":"domhash250ba63154306ec4ed5265f40af08348","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"urldefense.com/v3/__https://emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=__;!!OrxsNty6D4my!46SkFVZVgOzfYCwKkvtfQv7WilwBk94vfDGaYe9oaTTV7kiLAZ2hi5oFJ2HYXnvXFoL6D40s-e1YcPeLSMHZ-vyi$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.6.56.188","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T13:53:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"info.microsoft.com","ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1991-05-02","domain_rank":537096,"first_seen":"2015-03-31T13:10:07Z","last_seen":"2026-04-02T13:09:39.066605Z","alert_count":0,"request_count":7,"received_data":112772,"sent_data":7916,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"emails.microsoft.com","ip":{"addr":"104.17.71.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1991-05-02","domain_rank":646286,"first_seen":"2015-03-30T12:09:44Z","last_seen":"2026-04-02T13:09:38.824274Z","alert_count":0,"request_count":3,"received_data":2540,"sent_data":2195,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.microsoft.com","ip":{"addr":"96.6.17.223","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":812,"first_seen":"2012-05-21T04:29:41Z","last_seen":"2026-04-02T09:22:41.824805Z","alert_count":0,"request_count":1,"received_data":17925,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"urldefense.com","ip":{"addr":"52.6.56.188","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":3848,"first_seen":"2015-04-27T16:20:15Z","last_seen":"2026-03-30T09:14:55.579094Z","alert_count":0,"request_count":1,"received_data":1134,"sent_data":718,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"info.microsoft.com/js/stripmkttok.js","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19cfad3d14d21907820ad1a443f75427","sha1":"738250ad711f2e478f4448e6e65876fbcdbc3653","sha256":"f7545b96ed2740220c349ae9deb614faf1f0f211d4cf710788e0790f74cc9715","sha512":"52431a19839fc5bd77cb52d4808a76b9a82114490f1e029fe53f06c072d1934aab78120fb8e5b045f3849897a6cb9829d0e00d9e0414e8726beb097abf14a0ac","ssdeep":"","tlshash":"09319b8b25f219220db33369cf4f3650232141936205dd963cef9b45efa5d6f8a32ae5","size":1538,"data":"","first_seen":"2023-03-07T01:38:11Z","last_seen":"2026-06-10T15:08:12.616007Z","times_seen":2713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/js/anchorsupport.js","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2e76e1e640be1fc7f6aca6b30140e05","sha1":"41876c774519f8297ca986a7f36686cf5a75f0ef","sha256":"354a4d1c750b99aba85d3132498b23b9945a6f972d04aaaa1a5edc8da0927f32","sha512":"962e09f82426862ae7d0e476cd2ec327faa39e7adec2cb9d548668f1f50cff9e7089492b4def8269cdcee2cb8772acda8f6a17236453ad1e86e80bc23b99d813","ssdeep":"","tlshash":"d201265a31b100fa049f237e920b2768f131a0d37446dd047d4e8ea08f54b6924f1ed9","size":674,"data":"","first_seen":"2024-05-03T01:11:25Z","last_seen":"2026-06-08T18:46:25.149944Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"info.microsoft.com/js/stripmkttok.js","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /js/stripmkttok.js HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:05 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 678\r\ncf-ray: 9e60515b9edc5ebd-OSL\r\nlast-modified: Mon, 23 Mar 2026 22:07:23 GMT\r\netag: \"3e208e8-602-64db8425d5cc0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Thu, 02 Apr 2026 17:53:05 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"19cfad3d14d21907820ad1a443f75427","sha1":"738250ad711f2e478f4448e6e65876fbcdbc3653","sha256":"f7545b96ed2740220c349ae9deb614faf1f0f211d4cf710788e0790f74cc9715","sha512":"52431a19839fc5bd77cb52d4808a76b9a82114490f1e029fe53f06c072d1934aab78120fb8e5b045f3849897a6cb9829d0e00d9e0414e8726beb097abf14a0ac","ssdeep":"","tlshash":"09319b8b25f219220db33369cf4f3650232141936205dd963cef9b45efa5d6f8a32ae5","first_seen":"2023-03-07T01:38:11Z","last_seen":"2026-06-10T15:08:12.616007Z","times_seen":2713,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emails.microsoft.com/images/downloadPicture.gif","fqdn":"emails.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.71.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:06.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emails.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:18:05 GMT","end":"Tue, 21 Jul 2026 07:18:05 GMT"},"fingerprint":{"sha1":"C8:3F:7A:39:FC:0D:16:8F:9B:86:8C:A4:44:0A:60:88:CD:F3:D8:79","sha256":"5C:EB:2D:7C:EA:F1:A4:F8:D4:DF:0D:26:66:CF:42:41:AE:8C:F8:03:73:E6:6B:94:63:26:42:86:68:1A:5B:43"}}},"request":{"raw":"GET /images/downloadPicture.gif HTTP/1.1\r\nHost: emails.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://info.microsoft.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; __cf_bm=W4bNDLZcRA8To5lfJirX_2WA6btI9P6BLgLDIY72zGE-1775137982-1.0.1.1-MNoqwqMqXO.1Fun3Iho87btdyk7IEuZBYIhucEgme1rpWp4p8WDrBDsARXlTSlYiE10skerleg5R.RfUCblwkYEuruBsMMPldRxReNnXCUI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ncontent-type: image/gif;charset=UTF-8\r\ncf-ray: 9e60515cd8a7b51d-OSL\r\nx-request-id: d550e4e104b45951\r\nlast-modified: Thu, 02 Apr 2026 13:51:32 GMT\r\ncf-cache-status: HIT\r\nage: 56\r\nexpires: Thu, 02 Apr 2026 13:54:06 GMT\r\ncache-control: public, max-age=60\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"GIF image data, version 89a, 1 x 1","md5":"4bd992dae2dbbe35b4ec51458103f729","sha1":"64cd0b1d593d4ca9745db50a88d1047a7c8cd154","sha256":"db5d64a9ea32ed3abb874f295003ef2465cecc2f669efe951930e182c34a5013","sha512":"c816ef6b7f72c3f1c3203f630cd146c67c90ef2a0fec3b6de4cfc43b91f7108584b8c3c83608d2ec2425d45172b80fa711e9434e6d73a8b0e8c8fdc243cc3516","ssdeep":"","tlshash":"7a900083e3800003c2b2c0300b0e0f822b8caca00e28030fa0ae30acec3b3a82c03020","first_seen":"2023-04-10T20:12:38Z","last_seen":"2026-06-10T11:03:16.603488Z","times_seen":735,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=","fqdn":"emails.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.71.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T13:53:02.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emails.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:18:05 GMT","end":"Tue, 21 Jul 2026 07:18:05 GMT"},"fingerprint":{"sha1":"C8:3F:7A:39:FC:0D:16:8F:9B:86:8C:A4:44:0A:60:88:CD:F3:D8:79","sha256":"5C:EB:2D:7C:EA:F1:A4:F8:D4:DF:0D:26:66:CF:42:41:AE:8C:F8:03:73:E6:6B:94:63:26:42:86:68:1A:5B:43"}}},"request":{"raw":"GET /v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg= HTTP/1.1\r\nHost: emails.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 02 Apr 2026 13:53:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncf-ray: 9e6051446e1fb51d-OSL\r\nx-request-id: d69e0b1bd30c76ed\r\ncache-control: private, no-cache, no-store, max-age=0\r\nreferrer-policy: strict-origin\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-4BqozwX4CSEi9AgMVegsdJWo9uuF8wjyW167ln5Ns8k=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self'\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=W4bNDLZcRA8To5lfJirX_2WA6btI9P6BLgLDIY72zGE-1775137982-1.0.1.1-MNoqwqMqXO.1Fun3Iho87btdyk7IEuZBYIhucEgme1rpWp4p8WDrBDsARXlTSlYiE10skerleg5R.RfUCblwkYEuruBsMMPldRxReNnXCUI; path=/; expires=Thu, 02-Apr-26 14:23:02 GMT; domain=.emails.microsoft.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T02:58:52.640491Z","times_seen":16315450,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":359,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T13:53:02.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://emails.microsoft.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:05 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 9e60514a1ab15ebd-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nexpires: 0\r\nset-cookie: BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; Path=/; Version=1; Secure; Httponly\n__cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g; path=/; expires=Thu, 02-Apr-26 14:23:05 GMT; domain=.info.microsoft.com; HttpOnly; Secure; SameSite=None\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, accept-encoding\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-request-id: 1DB0E32FEAAE4803AAF6AD84745BD6FA\r\nx-xss-protection: 0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17542,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (912)","md5":"de45731468b5a9588c863280af8142d6","sha1":"8ec1d8fd01d4be5fa3174af5e2d6efa354d71703","sha256":"8352977590b1d48528f158b1a9c4e17eb19dab56e6e094e8e59042b4d57a9426","sha512":"05892e1e2fc620c41b1e8fde2982e6be33b7961840e7ae2c9292fb63cf4e9c218188c1467fabd949d43322a970745abf960ecb3fd439a0e374c6e5d6c40faf97","ssdeep":"192:/cm1LbLJz0wjEwkkoE6d46LDsI9Iq6GPGXDi1+O8XrypCL+WfWa7Afp1X4ALvdXK:fpQaTJFIChZwWaoarTokK5LRxh","tlshash":"1372b412d740253f885150bde2315e58e3ad8617db0245f8f5aeb13be34eea64922bfc","first_seen":"2026-04-02T13:53:23.964097Z","last_seen":"2026-04-02T13:53:23.964097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3186,"timings":{"blocked":222,"dns":213,"connect":1,"send":0,"wait":2734,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/favicon.ico","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:06.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.microsoft.com/favicon.ico?v2\r\ncf-ray: 9e60515dabfa5ebd-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nexpires: Thu, 02 Apr 2026 17:53:06 GMT\r\ncache-control: public, max-age=14400\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T02:58:52.640491Z","times_seen":16315450,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/favicon.ico?v2","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"96.6.17.223","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:06.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 19:55:21 GMT","end":"Sun, 17 Jan 2027 19:55:21 GMT"},"fingerprint":{"sha1":"AD:A5:F2:7D:8E:CE:C5:41:6F:5F:E1:90:43:31:0D:DD:30:5C:02:4B","sha256":"9F:17:B5:48:F7:D2:4F:30:9D:BC:AA:B5:71:57:6C:0C:A7:3B:80:55:9C:E6:9F:27:FE:29:5F:64:08:CC:57:BF"}}},"request":{"raw":"GET /favicon.ico?v2 HTTP/1.1\r\nHost: www.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://info.microsoft.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 17174\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\nlast-modified: Fri, 27 Mar 2026 17:31:30 GMT\r\netag: \"0x8DE8C26AEE7B798\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment\r\nx-vhost: publish_golf-microsoft_s\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31557600\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-timer: S1774648433.664472,VS0,VS0,VE2\r\ncache-control: public, max-age=176\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ntls_version: tls1.3\r\nms-cv: CASMicrosoftCV1445825b.0\r\nms-cv-esi: CASMicrosoftCV1445825b.0\r\ncontent-type: image/vnd.microsoft.icon\r\nx-edgescape-location: country_code=NO\r\nx-rtag: OneRoute_Default\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-06-11T03:02:21.327248Z","times_seen":165901,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":21,"connect":1,"send":0,"wait":20,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urldefense.com/v3/__https://emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=__;!!OrxsNty6D4my!46SkFVZVgOzfYCwKkvtfQv7WilwBk94vfDGaYe9oaTTV7kiLAZ2hi5oFJ2HYXnvXFoL6D40s-e1YcPeLSMHZ-vyi$","fqdn":"urldefense.com","domain":"urldefense.com","tld":"com"},"ip":{"addr":"52.6.56.188","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T13:53:01.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.urldefense.com","organization":"Proofpoint, Inc."},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:C8:D7:F6:B2:32:6F:60:5C:6B:0D:98:9F:56:44:B2:DB:14:BD:50","sha256":"A4:67:11:45:E1:64:88:F2:9B:65:46:98:36:C8:43:6E:42:4B:DC:E8:A1:10:04:EB:94:25:91:8C:82:15:44:93"}}},"request":{"raw":"GET /v3/__https://emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=__;!!OrxsNty6D4my!46SkFVZVgOzfYCwKkvtfQv7WilwBk94vfDGaYe9oaTTV7kiLAZ2hi5oFJ2HYXnvXFoL6D40s-e1YcPeLSMHZ-vyi$ HTTP/1.1\r\nHost: urldefense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 02 Apr 2026 13:53:02 GMT\r\ncontent-length: 0\r\nlocation: https://emails.microsoft.com/v/MTU3LUdRRS0zODIAAAGfNd1AjzZ8aIB4jX3VN1GNaFMWfMDRyRiZ64zi8v_DwXGLqWfGcy-gnqP0AAzGO-j9TxdrySg=\r\nstrict-transport-security: max-age=31536000\r\nx-robots-tag: noindex, nofollow\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":684,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T02:58:52.640491Z","times_seen":16315450,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":345,"dns":56,"connect":94,"send":0,"wait":155,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/rs/157-GQE-382/images/Microsoft365_logo_horiz_c-gray_rgb.png","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /rs/157-GQE-382/images/Microsoft365_logo_horiz_c-gray_rgb.png HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1963\r\ncf-ray: 9e60515b9ebd5ebd-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Sat, 28 Mar 2026 02:07:21 GMT\r\netag: \"3ce04ec-7ab-64e0c13f17f61\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: public, max-age=60\r\nexpires: Thu, 02 Apr 2026 13:54:06 GMT\r\ncf-cache-status: REVALIDATED\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 125 x 21, 8-bit/color RGBA, non-interlaced","md5":"2a88a5fd8438800aaefe7aec9f01c01c","sha1":"09d591720889a3c9e6dad10f2c22a29e387c9b5c","sha256":"a9866f27bf184bfbed7e1a53eb6ec3c969fea058bcde7ee6f8abe795ca683d96","sha512":"0eade2df08f4631856905eb2bbf432e620f11b3a618b96cfa6bda92f21cdd8a69cc752acea515756247d08d2cdd98b1f8ff48048a53b63e2994d3fb224667923","ssdeep":"","tlshash":"21412ad9a9c6e1de994b225a57b1083031c048f383287b86532493176533acecc09c93","first_seen":"2026-01-07T12:07:32.022541Z","last_seen":"2026-04-02T13:53:23.967772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/rs/microsoftdemandcenter/images/English-EMAILSND-Banner-SREMD213361-CCSSEmailBanner640x1001712202534823ltr.png","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /rs/microsoftdemandcenter/images/English-EMAILSND-Banner-SREMD213361-CCSSEmailBanner640x1001712202534823ltr.png HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 50619\r\ncf-ray: 9e60515b9ec05ebd-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Sat, 28 Mar 2026 05:17:23 GMT\r\netag: \"3ce0814-c5bb-64e0ebb961c7e\"\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nexpires: Thu, 02 Apr 2026 13:54:05 GMT\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 100, 8-bit/color RGB, non-interlaced","md5":"17799c86afc28a6b06e655832a534b16","sha1":"b36d37eb9a7c9d1392e425ebfa40f115813c05ad","sha256":"3097fb057ec28757293601c580db6a8a7685423df0f6886dc75ec20723d4adf0","sha512":"b7a00db6358d76c7f2a927c8c6dede6552c1bb17151a3d9c88bd35f0afc26cecdff5366d4653c06f465191f9f51482929484feff7e74ae1da9d9b278d206ba73","ssdeep":"1536:yUCc3tk8SF9Gqev57DVKl5egbxmkSwr6L8TG:rCcdk8SFlu5XE3ehfweL8TG","tlshash":"fb33f1e448b61355afadbf05d8eb47a124020610bcf87bcc1f6788e799f12e488f624d","first_seen":"2026-01-07T11:57:27.542804Z","last_seen":"2026-04-02T13:53:23.968355Z","times_seen":8,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/rs/157-GQE-382/images/EN-BASICE-Logo-MSFTLogo.png","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /rs/157-GQE-382/images/EN-BASICE-Logo-MSFTLogo.png HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 19280\r\ncf-ray: 9e60515b9ec65ebd-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Sat, 28 Mar 2026 02:10:02 GMT\r\netag: \"3a073f-4b50-64e0c1d92213d\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: public, max-age=60\r\nexpires: Thu, 02 Apr 2026 13:54:06 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 21, 8-bit/color RGBA, non-interlaced","md5":"8a2c6085a9a03c332b7de68f8fba3b8c","sha1":"e17a91574a015dfef32608f17d517d958c64e336","sha256":"0529351150346a648e4af045ccd7106f37b62cde70b8e5c6dc07738e58a3c682","sha512":"2821b661d23e8a665d7e115d3a054b8b89182f9f0f97bbd8f4531095bd0d3b635e7fdc79afe808ec3a6bfffb1ffbca97bea684542dfd5e15759a655319b0805f","ssdeep":"192:kPYS0tKg9E05TKkk64bKUf5HHnKWuJmryIE:kkXE0566IKE5nKWCj","tlshash":"ab826c34fdf0b460a88da2700ed13106ee77028bd9412d0579cd4eee5f10bab4e9f181","first_seen":"2023-05-04T00:40:13Z","last_seen":"2026-04-02T13:53:23.9689Z","times_seen":40,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emails.microsoft.com/trk?t=1\u0026mid=MTU3LUdRRS0zODIAAAGg7XDEAmllY_dFuCQk5NPLFiFOp6ejH6eQO0wsRRn3z_Clq_dXYARPGxwNLqVbs6quelSjIFHiG_YYSuZnqGVpzpa2rpr_1YXD74THcY-QGsxwl_5vx24Src1lTB9uv0VrvSucTVnxzkrZn3QyQxTjrGW-57Uo","fqdn":"emails.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.71.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emails.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:18:05 GMT","end":"Tue, 21 Jul 2026 07:18:05 GMT"},"fingerprint":{"sha1":"C8:3F:7A:39:FC:0D:16:8F:9B:86:8C:A4:44:0A:60:88:CD:F3:D8:79","sha256":"5C:EB:2D:7C:EA:F1:A4:F8:D4:DF:0D:26:66:CF:42:41:AE:8C:F8:03:73:E6:6B:94:63:26:42:86:68:1A:5B:43"}}},"request":{"raw":"GET /trk?t=1\u0026mid=MTU3LUdRRS0zODIAAAGg7XDEAmllY_dFuCQk5NPLFiFOp6ejH6eQO0wsRRn3z_Clq_dXYARPGxwNLqVbs6quelSjIFHiG_YYSuZnqGVpzpa2rpr_1YXD74THcY-QGsxwl_5vx24Src1lTB9uv0VrvSucTVnxzkrZn3QyQxTjrGW-57Uo HTTP/1.1\r\nHost: emails.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; __cf_bm=W4bNDLZcRA8To5lfJirX_2WA6btI9P6BLgLDIY72zGE-1775137982-1.0.1.1-MNoqwqMqXO.1Fun3Iho87btdyk7IEuZBYIhucEgme1rpWp4p8WDrBDsARXlTSlYiE10skerleg5R.RfUCblwkYEuruBsMMPldRxReNnXCUI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 02 Apr 2026 13:53:06 GMT\r\ncf-ray: 9e60515b9f14b51d-OSL\r\nx-request-id: b8e7c604c1867e47\r\ncache-control: private, no-cache, no-store, max-age=0\r\nlocation: /images/downloadPicture.gif\r\nreferrer-policy: strict-origin\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self';script-src 'self';object-src 'none';form-action 'none';frame-src 'none';style-src 'self'\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T02:58:52.640491Z","times_seen":16315450,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"info.microsoft.com/js/anchorsupport.js","fqdn":"info.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"104.17.73.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM","date":"2026-04-02T13:53:05.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"azureinfo.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 07:17:05 GMT","end":"Tue, 21 Jul 2026 07:17:05 GMT"},"fingerprint":{"sha1":"35:61:F9:12:2A:7C:E4:83:96:71:61:84:CD:99:B4:EE:AD:D8:DD:F2","sha256":"3D:8A:D4:7E:BF:C4:D5:68:16:FE:C4:8D:70:C4:B8:88:95:66:82:78:44:24:8C:96:62:64:EB:5C:7E:B6:CE:C8"}}},"request":{"raw":"GET /js/anchorsupport.js HTTP/1.1\r\nHost: info.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://info.microsoft.com/index.php/email/emailWebview?mkt_tok=MTU3LUdRRS0zODIAAAGfNd1AjxIb9-XJUSrhvxDnOPq1l2QDHAOk5cgf8Mnzhado0qvEXg0UsDAb6pmZYZSKSklj4jUkHNQ7AKWPmdRsSPvGL-8mFQU_Omaunrg76cQORgfMRYfBBN80\u0026email=MTU3LUdRRS0zODIAAAGg7XC3rw27tSRv_hStuAwWZ_-jn05Q-SU96Vu6Br30rY9ff3Z4v0pF0p6vCbqRdILzKOTNPv5XRiyiBBj5kzt-2wEPrnk67fjvvngM\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; BIGipServer~VS65000-N117~sj18web-nginx-app_https=!q9Yc2bEfcgjL2z4MoDsz2spDmQZJZEByBSytoh9XF9wDjOghJsW8aZn4nUafj6TWN3GZHMS3hj/UnXHAOCa70XrxVnQd9OkntleE2+r8KE0m; __cf_bm=FThi7uu5w4FZBfsI8YCTJr9gooJPuRHex.ot5ytUXBM-1775137985-1.0.1.1-MKPAOrOBcdtDoNHLG30qlRcqMx5FYOVYhgbP5rL1ozfDT0IEewD1lauVEr790Kpks.CP70qXy8Czzj0j5ab.CI4qr9R4D1rguYcKTUC892g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 13:53:05 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 349\r\ncf-ray: 9e60515b9ee35ebd-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 23 Mar 2026 22:07:23 GMT\r\netag: \"3e208f4-2a2-64db8425d5cc0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 2623\r\nexpires: Thu, 02 Apr 2026 17:53:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d2e76e1e640be1fc7f6aca6b30140e05","sha1":"41876c774519f8297ca986a7f36686cf5a75f0ef","sha256":"354a4d1c750b99aba85d3132498b23b9945a6f972d04aaaa1a5edc8da0927f32","sha512":"962e09f82426862ae7d0e476cd2ec327faa39e7adec2cb9d548668f1f50cff9e7089492b4def8269cdcee2cb8772acda8f6a17236453ad1e86e80bc23b99d813","ssdeep":"","tlshash":"d201265a31b100fa049f237e920b2768f131a0d37446dd047d4e8ea08f54b6924f1ed9","first_seen":"2024-05-03T01:11:25Z","last_seen":"2026-06-08T18:46:25.149944Z","times_seen":380,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}