r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 50a89b39234eb6cc4eda70d7e27be17f
306340eb26b6817fd8851a085563a88eed7e2b6b
eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10312
Expires: Wed, 21 Aug 2024 23:03:34 GMT
Date: Wed, 21 Aug 2024 20:11:42 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 133a8ab4e8c45f320352685e01db9625
a24555e329796c47c106c0f55d1d8807f652b257
9e748e8be620ce31ed3909b9574b05b4f49bd396482d89699218408c95294d97
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9E748E8BE620CE31ED3909B9574B05B4F49BD396482D89699218408C95294D97"
Last-Modified: Wed, 21 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8275
Expires: Wed, 21 Aug 2024 22:29:37 GMT
Date: Wed, 21 Aug 2024 20:11:42 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 5d0dd93e6a07253100201a9c8a3e15a5
30adbd52887825ae2779d7fb12276bed8b1d8178
07bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6633
Expires: Wed, 21 Aug 2024 22:02:16 GMT
Date: Wed, 21 Aug 2024 20:11:43 GMT
Connection: keep-alive
r10.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash fa24406b28144f03c66e0892b293241b
64ec25a3e583dcd2ea13558272ac7badebbfc3d6
8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17492
Expires: Thu, 22 Aug 2024 01:03:15 GMT
Date: Wed, 21 Aug 2024 20:11:43 GMT
Connection: keep-alive
ocsp.entrust.net/
1.6 kB IP
Hash 974970bcbc98b3ba2508c0afb15d5c36
e106f7ee715c204873a58907fa21856574f99242
b4510c67912791932561a30ebc79375a0edff633b87e5ee371804d3435ea0793
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "B4510C67912791932561A30EBC79375A0EDFF633B87E5EE371804D3435EA0793"
Last-Modified: Wed, 21 Aug 2024 09:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3572
Expires: Wed, 21 Aug 2024 21:11:15 GMT
Date: Wed, 21 Aug 2024 20:11:43 GMT
Connection: keep-alive
owa.postoffice.net/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET / HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache
Pragma: no-cache
Location: https://owa.postoffice.net/owa/
Server: Microsoft-IIS/10.0
X-FEServer: S1P5MBX4C
X-RequestId: 3a4248e6-3093-46bf-98ba-3b59827a0940
Date: Wed, 21 Aug 2024 20:11:42 GMT
Connection: close
Content-Length: 0
owa.postoffice.net/owa/
222 B IP
File type HTML document, ASCII text, with CRLF line terminators
Hash e5a37da4d3da762c22bdf6a1f2aeb725
a82df6c145587ff5d9a65d033e3427a9f319281a
dd83f916e8be8fad3bcf821295449ba306fa939ea184c74bba59075b4b30f64c
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/ HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: https://owa.postoffice.net/owa/auth/logon.aspx?url=https%3a%2f%2fowa.postoffice.net%2fowa%2f&reason=0
Server: Microsoft-IIS/10.0
request-id: b26d5b2b-1c0c-4959-a798-899064110ca3
X-OWA-Version: 15.2.1544.11
X-Powered-By: ASP.NET
X-FEServer: S1P7MBX5F
Date: Wed, 21 Aug 2024 20:11:43 GMT
Content-Length: 222
owa.postoffice.net/owa/auth/logon.aspx?url=https%3a%2f%2fowa.postoffice.net%2fowa%2f&reason=0
28 kB URL owa.postoffice.net/owa/auth/logon.aspx?url=https%3a%2f%2fowa.postoffice.net%2fowa%2f&reason=0
IP
File type HTML document, ASCII text, with very long lines (1062), with CRLF, LF line terminators
Hash b0f588870a9d6a42800241f82eb5502b
0293101ea25dbd4cbe4acc153ffa5a6d31831fbc
77911bb690cecea640a4046835701548b9adec2a4f0dfa387e3f89e68e10a59b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/logon.aspx?url=https%3a%2f%2fowa.postoffice.net%2fowa%2f&reason=0 HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 715d5155-4964-437e-b347-e0ded7bfc5c5
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 21 Aug 2024 20:11:43 GMT
Content-Length: 27982
owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
200 OK 61 kB URL User Request GET HTTP/1.1 owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
IP
Certificate IssuerEntrust, Inc.
Subjectrpc.postoffice.net
Fingerprint05:B4:B4:CD:16:2B:CE:60:65:A5:A1:FC:CE:82:70:20:98:1E:39:02
ValidityFri, 21 Jun 2024 09:05:57 GMT - Sat, 21 Jun 2025 09:05:56 GMT
File type HTML document, ASCII text, with very long lines (10414), with CRLF, LF line terminators
Hash 72fc074714b0280f80182a04e8585abc
ce2abc6a861a6622da7356f605103e014775caaf
70554ba09618223a47f2f382f739dbdedb8c5f277142b63773b2adfdd9230863
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://owa.postoffice.net/owa/auth/logon.aspx?url=https%3a%2f%2fowa.postoffice.net%2fowa%2f&reason=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 0a58b1c2-299f-439e-be30-00ff92b5456b
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 21 Aug 2024 20:11:44 GMT
Content-Length: 60723
owa.postoffice.net/owa/auth/15.2.1544/themes/resources/segoeui-regular.ttf
200 OK 57 kB URL GET HTTP/1.1 owa.postoffice.net/owa/auth/15.2.1544/themes/resources/segoeui-regular.ttf
IP
Requested by https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Certificate IssuerEntrust, Inc.
Subjectrpc.postoffice.net
Fingerprint05:B4:B4:CD:16:2B:CE:60:65:A5:A1:FC:CE:82:70:20:98:1E:39:02
ValidityFri, 21 Jun 2024 09:05:57 GMT - Sat, 21 Jun 2025 09:05:56 GMT
File type TrueType Font data, 18 tables, 1st "LTSH", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI RegularVersion 0.81 Build 159S
Hash 8af990b6ad3ba192c2dd6a193890bf5f
4db5bf117ff8f1392fab3b438216d7cff4ae4976
c147c2ec76a8ab8bd5082f1f4d3f80a43c689165cb164cdd812e44048fe38708
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.2.1544/themes/resources/segoeui-regular.ttf HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: application/octet-stream
Last-Modified: Thu, 21 Dec 2023 07:34:58 GMT
Accept-Ranges: bytes
ETag: "0bdde32e033da1:0"
Server: Microsoft-IIS/10.0
request-id: 48cb0e78-b345-4b9d-9149-5b42831d7313
X-Powered-By: ASP.NET
Date: Wed, 21 Aug 2024 20:11:44 GMT
Content-Length: 56760
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Wed, 21 Aug 2024 23:15:49 GMT
Date: Wed, 21 Aug 2024 20:11:45 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Wed, 21 Aug 2024 23:15:49 GMT
Date: Wed, 21 Aug 2024 20:11:45 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Wed, 21 Aug 2024 23:15:49 GMT
Date: Wed, 21 Aug 2024 20:11:45 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Wed, 21 Aug 2024 23:15:49 GMT
Date: Wed, 21 Aug 2024 20:11:45 GMT
Connection: keep-alive
r11.o.lencr.org/
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Wed, 21 Aug 2024 23:15:49 GMT
Date: Wed, 21 Aug 2024 20:11:45 GMT
Connection: keep-alive
owa.postoffice.net/owa/auth/15.2.1544/themes/resources/favicon.ico
200 OK 7.9 kB URL GET HTTP/1.1 owa.postoffice.net/owa/auth/15.2.1544/themes/resources/favicon.ico
IP
Requested by https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Certificate IssuerEntrust, Inc.
Subjectrpc.postoffice.net
Fingerprint05:B4:B4:CD:16:2B:CE:60:65:A5:A1:FC:CE:82:70:20:98:1E:39:02
ValidityFri, 21 Jun 2024 09:05:57 GMT - Sat, 21 Jun 2025 09:05:56 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash 759fade9033aa298629e4b000dcd6dde
34a1adf5c7326d7bde5b5735471b5d81e611c189
cf0808a61ec571e0c4975663903b288009d55502ac0445d9948983b339a5cf6e
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.2.1544/themes/resources/favicon.ico HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: image/x-icon
Last-Modified: Thu, 21 Dec 2023 08:15:38 GMT
Accept-Ranges: bytes
ETag: "03139e1e533da1:0"
Server: Microsoft-IIS/10.0
request-id: e2ae4f1a-d01e-4f49-beff-fe37821ff92f
X-Powered-By: ASP.NET
Date: Wed, 21 Aug 2024 20:11:44 GMT
Content-Length: 7886
owa.postoffice.net/owa/auth/15.2.1544/themes/resources/segoeui-semilight.ttf
200 OK 42 kB URL GET HTTP/1.1 owa.postoffice.net/owa/auth/15.2.1544/themes/resources/segoeui-semilight.ttf
IP
Requested by https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Certificate IssuerEntrust, Inc.
Subjectrpc.postoffice.net
Fingerprint05:B4:B4:CD:16:2B:CE:60:65:A5:A1:FC:CE:82:70:20:98:1E:39:02
ValidityFri, 21 Jun 2024 09:05:57 GMT - Sat, 21 Jun 2025 09:05:56 GMT
File type TrueType Font data, 16 tables, 1st "OS/2", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI SemilightVersion 1.00 build 16
Hash 6c26c24aabe31040657665b1e0d9505c
b3bdc48643752665e3e5798a192b27432a87d234
2d508a6e8979bba74b6fdf804c01a09a620c781e0fea73a8eefda904f5bcab25
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.2.1544/themes/resources/segoeui-semilight.ttf HTTP/1.1
Host: owa.postoffice.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://owa.postoffice.net/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fowa.postoffice.net%2fowa%2f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: application/octet-stream
Last-Modified: Thu, 21 Dec 2023 07:34:57 GMT
Accept-Ranges: bytes
ETag: "80264632e033da1:0"
Server: Microsoft-IIS/10.0
request-id: b51d6781-4d25-4289-bf4e-7577a652a3c3
X-Powered-By: ASP.NET
Date: Wed, 21 Aug 2024 20:11:44 GMT
Content-Length: 41560
165.212.120.200
23.36.76.249