{"report_id":"b9bbdde5-fa43-4429-9884-66ef86f0ade0","version":6,"status":"done","tags":[],"date":"2024-01-30T20:40:55Z","url":{"schema":"http","addr":"qvhq6gmh.biz/cgi/tbuckingham/cGx5b25zQGlkZWFsaWkuY29t","fqdn":"qvhq6gmh.biz","domain":"qvhq6gmh.biz","tld":"biz"},"ip":{"addr":"111.90.141.20","port":0,"asn":45839,"as":"Shinjiru Technology Sdn Bhd","country":"Malaysia","country_code":"MY"},"final":{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"title":"Encrypted Message Error"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T01:24:38Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"qvhq6gmh.biz","ip":{"addr":"111.90.141.20","port":0,"asn":45839,"as":"Shinjiru Technology Sdn Bhd","country":"Malaysia","country_code":"MY"},"domain_registered":"2024-01-17","domain_rank":0,"first_seen":"2024-01-17 07:24:01","last_seen":"2024-01-18 01:19:40","alert_count":0,"request_count":1,"received_data":314,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"css0-00000001-4mb4014-00073106b7c528-1qw7-495f-910d0s1q000.cw00q2a0qw.live","ip":{"addr":"94.156.69.71","port":443,"asn":394711,"as":"LIMENET","country":"Bulgaria","country_code":"BG"},"domain_registered":"2023-12-05","domain_rank":0,"first_seen":"2024-01-17 06:55:28","last_seen":"2024-01-30 18:45:07","alert_count":0,"request_count":1,"received_data":2736,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"outlook.office365.com","ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"2005-06-20","domain_rank":51,"first_seen":"2013-04-11 01:09:24","last_seen":"2021-03-15 09:11:50","alert_count":0,"request_count":7,"received_data":35077,"sent_data":5157,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.aspnetcdn.com","ip":{"addr":"152.199.19.160","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2010-10-12","domain_rank":693,"first_seen":"2012-05-24 15:35:31","last_seen":"2024-01-30 05:59:15","alert_count":0,"request_count":1,"received_data":34325,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static2.sharepointonline.com","ip":{"addr":"23.52.21.48","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Sweden","country_code":"SE"},"domain_registered":"2005-03-21","domain_rank":2149,"first_seen":"2017-01-29 19:49:09","last_seen":"2024-01-30 18:19:07","alert_count":0,"request_count":3,"received_data":43144,"sent_data":1435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r1.res.office365.com","ip":{"addr":"95.101.10.185","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-06-20","domain_rank":18241,"first_seen":"2014-12-19 11:18:54","last_seen":"2024-01-30 18:45:10","alert_count":0,"request_count":3,"received_data":71047,"sent_data":1522,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-01-30T20:40:29Z","timestamp":1706647229,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37507,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2024-01-30T20:40:29.815885+0000\",\"flow_id\":708920301417229,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.23\",\"src_port\":37507,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":63013,\"rrname\":\"qvhq6gmh.biz\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":72,\"bytes_toclient\":0,\"start\":\"2024-01-30T20:40:29.815885+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-30T20:40:29Z","timestamp":1706647229,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53023,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2024-01-30T20:40:29.831647+0000\",\"flow_id\":1191584431190175,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.23\",\"src_port\":53023,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":8600,\"rrname\":\"qvhq6gmh.biz\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":72,\"bytes_toclient\":0,\"start\":\"2024-01-30T20:40:29.831647+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"moz-extension","addr":"moz-extension://23b2d7a8-22d7-4177-9d83-b23021f2475b/injections/js/bug1731825-office365-email-handling-prompt-autohide.js","fqdn":"23b2d7a8-22d7-4177-9d83-b23021f2475b","domain":"23b2d7a8-22d7-4177-9d83-b23021f2475b","tld":"23b2d7a8-22d7-4177-9d83-b23021f2475b"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"7c873167b5d35fd9f6690071701d4669","sha1":"f897afe9818a00a80e98bdbc67e7f67343f89378","sha256":"014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a","sha512":"85f4b41add3c875f2d15feb5d8684c371dd19839e8c711f8570dc0eeab82faf5374373d350d82f3c0dc62316db450ed3e67c0b01537f6081846b8cc777090994","ssdeep":"","tlshash":"3511e28fb45362a3141106fd2b5f5455d1ff75257338d181364a859837a110f83b64d9","size":995,"data":"","first_seen":"2023-04-11T22:15:44Z","last_seen":"2026-04-03T23:06:05.880942Z","times_seen":65407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js","fqdn":"static2.sharepointonline.com","domain":"sharepointonline.com","tld":"com"},"ip":{"addr":"23.52.21.48","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"feee42503b4f434e577ad8fe100ce6f2","sha1":"4dc83cda17e8774f333343fa3d2a34e57aa76af9","sha256":"36b147da61d542a557a9b3d490e9ea174874c8d0d8fcdf35a841734bb5604ed5","sha512":"d768b59de6444e1687def8a57a9e84d3d988089dfbc36552db3a1f0f18be8f04b4565ec5e01eb600a5aa3881c124b9f312ad72fdcf081b16b2361a4ccf381bb4","ssdeep":"1536:6fCzb6ZwoT62ty40f9cIn9sUfrDajj8Y8awNMvOOedOmyLpVZ4rR5JmeUNLCtGfw:UKOmyWTtGfw","tlshash":"9e63a518f7282d3601d7d197617f5a4ba336206ed91644ac3529cdee0ebec8432b37b6","size":71409,"data":"","first_seen":"2023-03-13T02:24:42Z","last_seen":"2024-11-13T22:34:02.873614Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js","fqdn":"ajax.aspnetcdn.com","domain":"aspnetcdn.com","tld":"com"},"ip":{"addr":"152.199.19.160","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T23:25:47.96724Z","times_seen":67154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"qvhq6gmh.biz/cgi/tbuckingham/cGx5b25zQGlkZWFsaWkuY29t","fqdn":"qvhq6gmh.biz","domain":"qvhq6gmh.biz","tld":"biz"},"ip":{"addr":"111.90.141.20","port":0,"asn":45839,"as":"Shinjiru Technology Sdn Bhd","country":"Malaysia","country_code":"MY"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-01-30T20:40:30.351956169Z","timestamp":1706647230352,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cgi/tbuckingham/cGx5b25zQGlkZWFsaWkuY29t HTTP/1.1\r\nHost: qvhq6gmh.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 30 Jan 2024 20:40:29 GMT\r\nServer: Apache\r\nrefresh: 0;url=https://css0-00000001-4mb4014-00073106b7c528-1qw7-495f-910d0s1q000.cw00q2a0qw.live//?username=plyons@idealii.com\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css0-00000001-4mb4014-00073106b7c528-1qw7-495f-910d0s1q000.cw00q2a0qw.live//?username=plyons@idealii.com","fqdn":"css0-00000001-4mb4014-00073106b7c528-1qw7-495f-910d0s1q000.cw00q2a0qw.live","domain":"cw00q2a0qw.live","tld":"live"},"ip":{"addr":"94.156.69.71","port":443,"asn":394711,"as":"LIMENET","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-01-30T20:40:30.498Z","timestamp":1706647230498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cw00q2a0qw.live","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Dec 2023 09:27:11 GMT","end":"Mon, 04 Mar 2024 09:27:10 GMT"},"fingerprint":{"sha1":"B1:A6:B9:70:6A:4B:12:C6:E5:48:C9:47:88:41:9E:3C:E6:FB:FB:A0","sha256":"2A:83:C1:05:D5:15:46:DF:71:9A:25:12:24:78:2C:25:0A:F9:91:21:35:05:9A:B8:D1:25:DF:29:9F:EE:9F:6B"}}},"request":{"raw":"GET //?username=plyons@idealii.com HTTP/1.1\r\nHost: css0-00000001-4mb4014-00073106b7c528-1qw7-495f-910d0s1q000.cw00q2a0qw.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2344,"size_decoded":2344,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)","md5":"81420aa894f259fb94d17ffbfd307971","sha1":"ac845331d52845be2cf3eb00ed4d3349a8215ac2","sha256":"583b8b1c66dd98321ecc106e21c8ff2430b9589f709cfe44ee505758ee422906","sha512":"a55c3137ff5a8f2b5fab9694c2a561c2c59302a505b0d07e67a7dcf972517c44a2ee5860ac19d8b269e1985f5a2b494e1773dfe5249f89703ca223055632d5ee","ssdeep":"","tlshash":"33414d087b1624d0de0fefe51399941f1b074f2056cda7232891d460758f5519fd92ea","first_seen":"2024-01-30T19:12:56Z","last_seen":"2024-08-20T10:38:52.284334Z","times_seen":47,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":50,"dns":1,"connect":21,"send":0,"wait":71,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/base.css","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.907Z","timestamp":1706647230907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/base.css HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2276\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: b346ba85-d12f-303f-a001-7a5cdd9d12d5\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: GVZP280MB0474.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: GVZP280MB0474\r\nx-beserver: GVZP280MB0474\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2276,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"487d50a347595d631bb8cc3f37de120a","sha1":"bb8a3f189be59b1df22ca5693c60d399c8300e3c","sha256":"0366f6a4e592fb3ced23b49f334183e4935c6b91b72b392dafc2a4d6788c12c3","sha512":"bc5ec4203d3a1f9cdf8b6a9e2a9c009cf60dda94afacbdb51dc5e8c8dc0454547dbbcdf3f8b289b7068e065d0c5bc3b9d8d08e5cca81920955dcf53aa55a2b7b","ssdeep":"192:EaKeFh0YSmD/NBG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/rG4mmbz+jVr8z","tlshash":"7b0240271bc4fe27f1321165e2f26a1ced920137cb569091b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:45:39Z","last_seen":"2024-08-20T10:38:58.724153Z","times_seen":185,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js","fqdn":"ajax.aspnetcdn.com","domain":"aspnetcdn.com","tld":"com"},"ip":{"addr":"152.199.19.160","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.914Z","timestamp":1706647230914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vo.msecnd.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 May 2023 00:00:00 GMT","end":"Sun, 28 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80","sha256":"BF:60:70:23:0A:9B:F0:F9:BC:EE:56:40:4B:F6:C3:4B:F6:BE:14:87:14:29:CF:BD:47:5C:31:E8:85:A5:7F:C3"}}},"request":{"raw":"GET /ajax/jQuery/jquery-1.12.4.min.js HTTP/1.1\r\nHost: ajax.aspnetcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17859908\r\ncache-control: public,max-age=31536000\r\ncontent-type: application/javascript\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\netag: \"0e6586cc33d21:0\"\r\nlast-modified: Mon, 31 Oct 2016 23:10:52 GMT\r\nserver: ECAcc (ska/F6A4)\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 33835\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33835,"size_decoded":97163,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T23:25:47.96724Z","times_seen":67154,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":19,"dns":1,"connect":8,"send":0,"wait":11,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js","fqdn":"static2.sharepointonline.com","domain":"sharepointonline.com","tld":"com"},"ip":{"addr":"23.52.21.48","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.912Z","timestamp":1706647230912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privatecdn.sharepointonline.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Sep 2023 00:00:00 GMT","end":"Thu, 05 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"89:D8:A0:A8:A0:8B:9E:77:86:3D:9D:9F:80:07:D1:FA:7C:16:4D:6F","sha256":"D6:7B:C8:74:83:7E:B3:8D:76:39:56:B1:17:31:7E:15:88:0C:39:42:65:AD:DE:79:1F:FD:25:D8:54:D0:E4:0B"}}},"request":{"raw":"GET /files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js HTTP/1.1\r\nHost: static2.sharepointonline.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-md5: /u5CUDtPQ05Xetj+EAzm8g==\r\nlast-modified: Wed, 16 Aug 2017 00:33:35 GMT\r\netag: 0x8D4E43E6E7A7355\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 704cf909-b01e-0066-3f7b-bec90d000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15069\r\ncache-control: public, max-age=9056955\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15069,"size_decoded":71409,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32042), with CRLF, LF line terminators","md5":"feee42503b4f434e577ad8fe100ce6f2","sha1":"4dc83cda17e8774f333343fa3d2a34e57aa76af9","sha256":"36b147da61d542a557a9b3d490e9ea174874c8d0d8fcdf35a841734bb5604ed5","sha512":"d768b59de6444e1687def8a57a9e84d3d988089dfbc36552db3a1f0f18be8f04b4565ec5e01eb600a5aa3881c124b9f312ad72fdcf081b16b2361a4ccf381bb4","ssdeep":"1536:6fCzb6ZwoT62ty40f9cIn9sUfrDajj8Y8awNMvOOedOmyLpVZ4rR5JmeUNLCtGfw:UKOmyWTtGfw","tlshash":"9e63a518f7282d3601d7d197617f5a4ba336206ed91644ac3529cdee0ebec8432b37b6","first_seen":"2023-03-13T02:24:42Z","last_seen":"2024-11-13T22:34:02.873614Z","times_seen":268,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":53,"dns":22,"connect":8,"send":0,"wait":10,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/lock.png","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:31.175Z","timestamp":1706647231175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/lock.png HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 8734\r\ncontent-type: text/html; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 2c0abfed-0e2f-6636-e421-04de59bdd6c1\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: MM0P280MB0197.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: MM0P280MB0197\r\nx-beserver: MM0P280MB0197\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8734,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f7f0a2c77e3980df2e73e20a94a51b68","sha1":"1ff8e57e6a8444d30428749afe829f5fe2efbe36","sha256":"aef17c1032bd28e337dbd7544254c12f4fe100700e85a553616bd38db0cd9f18","sha512":"69941cff377c713fbfacfa7de97b30512cc7a001169174f0b02142ce396d989394034074c54a59e42b01f148a2d3ad24ab3f83cac8f461d30ba4402220f3d2b2","ssdeep":"192:EaKeFh0YSmD//DG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/bG4mmbz+jVr8z","tlshash":"a50240271bc4fe27f1321165e2f26a1ced920037cb569091b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:48:22Z","last_seen":"2024-08-20T10:38:58.321376Z","times_seen":47,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.components.min.css","fqdn":"static2.sharepointonline.com","domain":"sharepointonline.com","tld":"com"},"ip":{"addr":"23.52.21.48","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.911Z","timestamp":1706647230911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privatecdn.sharepointonline.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Sep 2023 00:00:00 GMT","end":"Thu, 05 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"89:D8:A0:A8:A0:8B:9E:77:86:3D:9D:9F:80:07:D1:FA:7C:16:4D:6F","sha256":"D6:7B:C8:74:83:7E:B3:8D:76:39:56:B1:17:31:7E:15:88:0C:39:42:65:AD:DE:79:1F:FD:25:D8:54:D0:E4:0B"}}},"request":{"raw":"GET /files/fabric/office-ui-fabric-js/1.2.0/css/fabric.components.min.css HTTP/1.1\r\nHost: static2.sharepointonline.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 02 Nov 2017 17:22:03 GMT\r\netag: 0x8D522163BD7D3C1\r\ncontent-type: text/css\r\ncontent-md5: lkkPz7twH/cowVWndqClEw==\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 057a3c00-701e-000b-3001-b97d46000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 14744\r\nunused62: 8096267\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14744,"size_decoded":104475,"mime_type":"text/css","magic":"ASCII text, with very long lines (65277), with CRLF, LF line terminators","md5":"96490fcfbb701ff728c155a776a0a513","sha1":"e17fe68aa8b8ff6a4a0d9900688a0f1c76e62047","sha256":"6b701dbe9b7aeba38782e2f6726e2a928ec2abef62f43866c88f44fd1a282b2a","sha512":"647df948e0405fcf42bd50573af2e18fcc48966f4c6cd707a469670afc74708b4e8a7e6889b3429f1dc42784277edbbe2c7a6b3e22fe452940cdca159fbb7bec","ssdeep":"384:6Wy2UjuYRXbpwXd2MAfbqdfXCCPcTo5ugIjidunI05bbNJdxIL/lcU/rEE8i4DM9:6F7NJds7XGDlat796yZGZimvq71Z","tlshash":"06a372a3cac1285ff43b9a39b091fb9a6b50d693a4611ba7fd3ca015d3cb4cc1613b45","first_seen":"2023-04-05T22:52:01Z","last_seen":"2024-11-13T22:34:02.874824Z","times_seen":268,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":55,"dns":23,"connect":16,"send":0,"wait":19,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.min.css","fqdn":"static2.sharepointonline.com","domain":"sharepointonline.com","tld":"com"},"ip":{"addr":"23.52.21.48","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.909Z","timestamp":1706647230909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privatecdn.sharepointonline.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Sep 2023 00:00:00 GMT","end":"Thu, 05 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"89:D8:A0:A8:A0:8B:9E:77:86:3D:9D:9F:80:07:D1:FA:7C:16:4D:6F","sha256":"D6:7B:C8:74:83:7E:B3:8D:76:39:56:B1:17:31:7E:15:88:0C:39:42:65:AD:DE:79:1F:FD:25:D8:54:D0:E4:0B"}}},"request":{"raw":"GET /files/fabric/office-ui-fabric-js/1.2.0/css/fabric.min.css HTTP/1.1\r\nHost: static2.sharepointonline.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-md5: XUjxWbxfkV3LFSJbRQCH2A==\r\nlast-modified: Fri, 22 Sep 2017 23:42:39 GMT\r\netag: 0x8D502139C45D439\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 44c51ac8-d01e-0094-616f-8e3144000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 11130\r\ncache-control: public, max-age=9603607\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11130,"size_decoded":68062,"mime_type":"text/css","magic":"ASCII text, with very long lines (65291), with CRLF, LF line terminators","md5":"5d48f159bc5f915dcb15225b450087d8","sha1":"b326b865d25f5479f3a53982a86cc7ad617c1f70","sha256":"6d578eb55e7fb3fc677c63e6ab840053a5773ca0b667d6fe6dc27edbd1a59e73","sha512":"ff64c81b93c12ecee4ac931bb105ba6472b008934106b896dcc1cc7a125067e2ba06fc310cab001f9f03f6234426ab2fd2f6db34d6cc754654b145a3d86f53e8","ssdeep":"384:JbmwPxF9aWzSDiBwQ9M2VGJqiU29ccZlR8iFzSDr+wF8pHBsFkeJxRS6tShRxqrR:JbttkWD/nTc3q4L78YoMElZH","tlshash":"9f637ae6e42690dd63e3ce27b341ab1a9525f8e1f291cd57f01e2c0c99c0a4916d9b3f","first_seen":"2023-04-05T22:52:01Z","last_seen":"2024-11-13T22:34:02.872487Z","times_seen":268,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":56,"dns":24,"connect":8,"send":0,"wait":20,"receive":19,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/arrow.png","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.916Z","timestamp":1706647230916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/arrow.png HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2276\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 389848f2-7f11-164e-4935-41714022e564\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: GVZP280MB0973.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: GVZP280MB0973\r\nx-beserver: GVZP280MB0973\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2276,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"487d50a347595d631bb8cc3f37de120a","sha1":"bb8a3f189be59b1df22ca5693c60d399c8300e3c","sha256":"0366f6a4e592fb3ced23b49f334183e4935c6b91b72b392dafc2a4d6788c12c3","sha512":"bc5ec4203d3a1f9cdf8b6a9e2a9c009cf60dda94afacbdb51dc5e8c8dc0454547dbbcdf3f8b289b7068e065d0c5bc3b9d8d08e5cca81920955dcf53aa55a2b7b","ssdeep":"192:EaKeFh0YSmD/NBG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/rG4mmbz+jVr8z","tlshash":"7b0240271bc4fe27f1321165e2f26a1ced920137cb569091b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:45:39Z","last_seen":"2024-08-20T10:38:58.724153Z","times_seen":185,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/lock.png","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:31.175Z","timestamp":1706647231175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/lock.png HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2276\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: a6447c01-326d-88b4-33f0-f5ba260bc5b6\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: GVYP280MB0365.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: GVYP280MB0365\r\nx-beserver: GVYP280MB0365\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2276,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4759f0892d728d53c90916040ec8c6d1","sha1":"85d6ae656c4dda38e01f8ce501a2dfa3ddd46370","sha256":"9a5d14549f1ed456ae8ba4938229baa56d50f956848263e2cababd684b53d099","sha512":"efc9fba82be78e30ff68725d8e934c5a22ff99f4525f5dc35c5e83f29098908a97bcca7e6d9a5d5d6ff56f118e1e74b22bf251714c2ad9149a397ea4259eacb6","ssdeep":"192:EaKeFh0YSmD/oAG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/HG4mmbz+jVr8z","tlshash":"170251271bc4fe27f1321165e2f26a1ced920037cb569092b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:45:39Z","last_seen":"2024-08-20T10:38:58.730456Z","times_seen":156,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1.res.office365.com/owa/prem/fonts/segoeui-semilight.woff","fqdn":"r1.res.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"95.101.10.185","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:31.180Z","timestamp":1706647231180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /owa/prem/fonts/segoeui-semilight.woff HTTP/1.1\r\nHost: r1.res.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://outlook.office365.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 10 Feb 2015 01:15:15 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 29464\r\nCache-Control: public,max-age=630720000, s-maxage=630720000\r\nDate: Tue, 30 Jan 2024 20:40:30 GMT\r\nConnection: keep-alive\r\nTiming-Allow-Origin: *\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: application/font-woff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29464,"size_decoded":29464,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 29464, version 1.0","md5":"6a419545705dee19082e8e62105488df","sha1":"72a5d33a47932ed6cf2d196c8d8222204e4a71fd","sha256":"c63a3930ec9dd26c24b4c62b83d8cf778416a0ded1d9aa83e0840a675155b71b","sha512":"e3f5dea379c35eaf243919ac8ab3d3d55ae365d0f089e20b4598acb04638e510036bcfb1f706c013956b87592414aa792f8a308430d0a91fd318e6e657db01c2","ssdeep":"768:YvDsls654eX7+H3NHTobFlalhMtxr+LfESHIPUJ:YvDsYZH3tcRglGw8SHIPc","tlshash":"a1d2d079c76226b3d0b30c3a51bbebd4d6c28f1f21e1a56e46d4f86eb14a90509f7306","first_seen":"2023-04-05T04:45:10Z","last_seen":"2026-04-04T00:03:47.117511Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":57,"dns":41,"connect":2,"send":0,"wait":3,"receive":2,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff","fqdn":"r1.res.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"95.101.10.185","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:31.182Z","timestamp":1706647231182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /owa/prem/fonts/segoeui-regular.woff HTTP/1.1\r\nHost: r1.res.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://outlook.office365.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 10 Feb 2015 01:15:14 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 34924\r\nCache-Control: public,max-age=630720000, s-maxage=630720000\r\nDate: Tue, 30 Jan 2024 20:40:30 GMT\r\nConnection: keep-alive\r\nTiming-Allow-Origin: *\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: application/font-woff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":34924,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 34924, version 1.0","md5":"46749bbaebfe8f28b80df5381dd55aa4","sha1":"ec0c969053ec70db78b2067955330b6d50df6300","sha256":"07ec698b1036cdfbb8892f02d9510f5f671284fca9fa003b883996da040a444b","sha512":"f6760bc6db9418b109f191705d0539f4e85b9eefc097a63fcb471a83d398d0a7ad7e8aad90a417b42b9a9f2d5a645300476b49e0c129ab9d6aeb5c21382586b6","ssdeep":"768:CtDsmvhrD92jyxJtf+JzT2z6K1AWhoWQGQwXg4MqHNESHHfW:CtDs0l92jktf+BAlbQwQceSnfW","tlshash":"cbf2f1645099090bca7f46fc7beba3e0b1831b1732e4f6168360fd48e9620d25ef6284","first_seen":"2023-04-05T04:45:10Z","last_seen":"2026-04-04T00:03:47.134655Z","times_seen":2217,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":60,"dns":40,"connect":6,"send":0,"wait":3,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1.res.office365.com/owa/prem/15.20.7228.34/resources/images/0/favicon.ico","fqdn":"r1.res.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"95.101.10.185","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:31.563Z","timestamp":1706647231563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /owa/prem/15.20.7228.34/resources/images/0/favicon.ico HTTP/1.1\r\nHost: r1.res.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: image/x-icon\r\nLast-Modified: Sun, 28 Jan 2024 20:42:36 GMT\r\nServer: AkamaiNetStorage\r\nContent-Length: 5430\r\nCache-Control: public,max-age=630720000, s-maxage=630720000\r\nDate: Tue, 30 Jan 2024 20:40:31 GMT\r\nConnection: keep-alive\r\nTiming-Allow-Origin: *\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":5430,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f82312f1281e8d6c87f7ffca0a7d147c","sha1":"103d0c7b915b40584e0543856e87b360568fe8c8","sha256":"dec51a1a5c6f5daddebe7c7d1048319969446f03de89a953c3c3514f8db08e8a","sha512":"c9ea288cc6d9d4b9872fcc49fd2ad461c9600b807311cd82c07c68465224d3a6004fa89f60088a34bbcf4ca96404f5a1b01e6009ca4fd964d63a53cf856f7c0c","ssdeep":"24:uBt4Xx4WdZSKhds/KIaCBD4+VLmNmPmTkVKva0bb1FrCyRwGiuaa4sjgV6m2/NUZ:uB+XA3RByBLCDuvjjgSKsx7cccccb","tlshash":"f7b197e191abd481d2ca39f6828175bcc4631c71bed612e56033792f5072247efa974e","first_seen":"2023-05-05T17:35:37Z","last_seen":"2024-12-05T21:29:25.184613Z","times_seen":315,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/arrow.png","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.916Z","timestamp":1706647230916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/arrow.png HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2276\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 68c43e79-86a5-db81-faba-19c6e642fcca\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: GVYP280MB0784.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: GVYP280MB0784\r\nx-beserver: GVYP280MB0784\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2276,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4759f0892d728d53c90916040ec8c6d1","sha1":"85d6ae656c4dda38e01f8ce501a2dfa3ddd46370","sha256":"9a5d14549f1ed456ae8ba4938229baa56d50f956848263e2cababd684b53d099","sha512":"efc9fba82be78e30ff68725d8e934c5a22ff99f4525f5dc35c5e83f29098908a97bcca7e6d9a5d5d6ff56f118e1e74b22bf251714c2ad9149a397ea4259eacb6","ssdeep":"192:EaKeFh0YSmD/oAG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/HG4mmbz+jVr8z","tlshash":"170251271bc4fe27f1321165e2f26a1ced920037cb569092b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:45:39Z","last_seen":"2024-08-20T10:38:58.730456Z","times_seen":156,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/help.png","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","date":"2024-01-30T20:40:30.915Z","timestamp":1706647230915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/help.png HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com\r\nCookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; X-AnonResource=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2276\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 14ad2be0-d8b6-5c0f-afe8-0d62fc6fc9fb\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: GVYP280MB0464.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: GVYP280MB0464\r\nx-beserver: GVYP280MB0464\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:34 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2276,"size_decoded":8734,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4759f0892d728d53c90916040ec8c6d1","sha1":"85d6ae656c4dda38e01f8ce501a2dfa3ddd46370","sha256":"9a5d14549f1ed456ae8ba4938229baa56d50f956848263e2cababd684b53d099","sha512":"efc9fba82be78e30ff68725d8e934c5a22ff99f4525f5dc35c5e83f29098908a97bcca7e6d9a5d5d6ff56f118e1e74b22bf251714c2ad9149a397ea4259eacb6","ssdeep":"192:EaKeFh0YSmD/oAG7E7C7CbEICPjVXVWy8z:lKeFh0YSmD/HG4mmbz+jVr8z","tlshash":"170251271bc4fe27f1321165e2f26a1ced920037cb569092b0be795b4fb6c29498771c","first_seen":"2024-01-30T18:45:39Z","last_seen":"2024-08-20T10:38:58.730456Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"outlook.office365.com/Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com","fqdn":"outlook.office365.com","domain":"office365.com","tld":"com"},"ip":{"addr":"52.98.149.162","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-01-30T20:40:30.623Z","timestamp":1706647230623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Oct 2023 00:00:00 GMT","end":"Wed, 30 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:18:F1:AE:4C:1B:9A:B4:43:F1:6E:82:31:48:81:81:E3:2E:45:09","sha256":"DD:AF:32:B9:3B:47:1F:B1:E2:0C:D5:43:44:EC:C5:0D:71:22:F1:A5:8C:09:05:5D:B9:55:77:EB:D9:B4:C7:D3"}}},"request":{"raw":"GET /Encryption/ErrorPage.aspx/?src=3\u0026code=11\u0026be=SN6PR04MB4014\u0026fe=JNAP275CA0040.ZAFP275.PROD.OUTLOOgK.COM\u0026loc=en-US\u0026itemID=E4E_M_e9df154a-e4b8-4486-8aec-7acceeb93fee\u0026username=plyons%40idealii.com HTTP/1.1\r\nHost: outlook.office365.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 2344\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: d11dccc1-e942-1bef-c4d0-8cf71c95f5a8\r\nalt-svc: h3=\":443\",h3-29=\":443\"\r\nx-calculatedbetarget: MM0P280MB0486.SWEP280.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nset-cookie: X-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; path=/; secure; HttpOnly\nX-E4E-CorrelationId=4518a51c-acb4-4c9b-8e3c-fb6ae86f8ae6; path=/; secure; HttpOnly\nX-AnonResource=true; path=/\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-aspnet-version: 4.0.30319\r\nx-diaginfo: MM0P280MB0486\r\nx-beserver: MM0P280MB0486\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: GVX\r\nx-feproxyinfo: GV3P280CA0012.SWEP280.PROD.OUTLOOK.COM\r\nx-feefzinfo: GVX\r\nx-powered-by: ASP.NET\r\nx-feserver: GV3P280CA0012\r\ndate: Tue, 30 Jan 2024 20:40:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8850,"size_decoded":8850,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9570), with no line terminators","md5":"c2ec5f3be303d26f7933bfd050dcec76","sha1":"55cde84741fa3edeb7980242f93c0461a28d161c","sha256":"a774341b8e57025959a25a5c44aeb0e1c1456f4147acf32f7289826ee2dd16cd","sha512":"8852011845899eb87b12e952aaee4d3fa9c6ecff9b1be97a33ba6998125408665fd3d6a2457aecab21511fb042e48ba036a9f642e8e6f6c0ef9cadc408192a63","ssdeep":"96:G7MFr4WOIVjktf7BNf7BVL7B/gipjOZv7xz0B4Meu7eQwRKP7XQde:L47D7H7BzOZzxzSeu7eIX","tlshash":"1e12522b2f4cf137b902109971f3aa282c66306a8fb5c462b5ed9c55cfd6c5d44a7f28","first_seen":"2024-01-30T19:04:26Z","last_seen":"2024-08-20T10:38:53.576808Z","times_seen":66,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":54,"dns":6,"connect":10,"send":0,"wait":82,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}