{"report_id":"d47f7e4e-e4ee-422b-9980-6f13831f6461","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2025-11-25T15:52:37Z","url":{"schema":"http","addr":"attachment.outlook.live.net","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.114","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/?nlp=0","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"title":"Outlook","dom":{"size":3092,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3090), with no line terminators","md5":"0354705137cd00ddc0e0920253ff8786","sha1":"08acf154f9a42017f782f4c9c77e669279a42db6","sha256":"ce1457dd46e7a2313185c27eae6dc81751ff6fec0392f23104bd9fde1da27edf","sha512":"d9bf4545b430a8dc90d4cd0a7b3ef42385fe51045726d93a3265c7f36d855e422f0282361c00dc4d7548717b65da4bd083da82e569e6baf9460df91a20f090fe","ssdeep":"","tlshash":"a851833bf986b806622205f0f08b7644e1959117b3038ee0f3d863eb59d58c9d667f9c","dom_hash":"domhash6a95541db2f16473a3a2c67b2d6c3e14","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"attachment.outlook.live.net","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.114","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-30T15:52:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"res.public.onecdn.static.microsoft","ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2023-05-05","domain_rank":930,"first_seen":"2024-03-21T01:17:57Z","last_seen":"2025-11-24T16:24:03.151375Z","alert_count":0,"request_count":32,"received_data":13825303,"sent_data":16856,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"attachment.outlook.live.net","ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"domain_registered":"1995-07-17","domain_rank":70451,"first_seen":"2017-08-17T13:18:48Z","last_seen":"2025-11-25T13:23:22.296558Z","alert_count":5,"request_count":5,"received_data":79360,"sent_data":2931,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"eu-office.events.data.microsoft.com","ip":{"addr":"13.69.116.104","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"1991-05-02","domain_rank":5585,"first_seen":"2022-07-18T00:26:38Z","last_seen":"2025-11-20T06:45:04.599197Z","alert_count":0,"request_count":1,"received_data":891,"sent_data":795,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"login.live.com","ip":{"addr":"20.231.128.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"1994-12-28","domain_rank":179,"first_seen":"2012-05-21T07:00:20Z","last_seen":"2025-11-24T03:05:58.650901Z","alert_count":0,"request_count":4,"received_data":17142,"sent_data":6842,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login.microsoftonline.com","ip":{"addr":"40.126.53.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"2002-07-09","domain_rank":52,"first_seen":"2017-02-19T08:06:40Z","last_seen":"2025-11-24T01:22:56.466241Z","alert_count":0,"request_count":2,"received_data":15595,"sent_data":3007,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"browser.events.data.microsoft.com","ip":{"addr":"13.69.116.105","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"1991-05-02","domain_rank":380,"first_seen":"2018-05-25T06:23:05Z","last_seen":"2025-11-24T10:10:23.727609Z","alert_count":0,"request_count":1,"received_data":891,"sent_data":793,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b6765015c5e7224cdef91cd0cd9a06","sha1":"be907e448116b5eee549ddbd76e83cd024c8fcdc","sha256":"e55e8171c4ed96cbfd0b6f92d1911923e10bcd883966f86f16eb1bd5c5221ba0","sha512":"af41b922a29705bc08dc4165ed64c15a3b9c1956dde52e9b1e86e89163a163911a071eb23933a079b571a7095512160f680cd115e5150ef4174db5d2eec5bf42","ssdeep":"3072:P4WHvprns33TOiig8e1ufZ63SAhe7C9dXnIL6LYUIWpZ:A+dngMHDf0iAk7CfXWfUI0Z","tlshash":"23248c5dbb1dd4dabea009e6af41a8fd6540b11f3c0e07812ccdd3b520dd97c2276a6a","size":216648,"data":"","first_seen":"2025-11-21T09:19:30.567025Z","last_seen":"2025-12-01T19:35:23.410494Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","size":321856,"data":"","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.15509.m.c29b4020.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de4326cec7aff21ccfc793ff6fcc9853","sha1":"4c3e04a040c01421c0f53627fc4e0838b1332940","sha256":"f0143b1248f987032e005cbbd30e97b63156f810eb9c4f4abda80d568c1636d5","sha512":"e17164d21700419717e986a537eb015f05f52c63e2763921a25904e8716cea3d4159fd36155cc96428ff115b5c1fffe77d69d4326bca6196ac5ad0aee8458642","ssdeep":"","tlshash":"21111c63819b68d9aff234dc6e5292107e8d57a4772e0c91a07eec23121b7dc3057399","size":1000,"data":"","first_seen":"2025-07-06T17:32:36.040171Z","last_seen":"2026-02-22T02:25:49.148221Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d309d6a365e12c558a514ef365af1554","sha1":"1698d9e0577c834c3886a88f376a0f081dcc4e32","sha256":"da36ced8a30779cbae8eb90c68d41032de6426915554b79c910af57d160452c7","sha512":"b92a9e982d9b18aee0eac381486beefca0bf3029bd9294964b4b26b3fa5dd6075b6e5528a0e48392ca61aea417a5bd4f83664d8c44c99f59c9a7fa0d8f3366fb","ssdeep":"","tlshash":"9ad02b33d52da0129207002c9501263ec58424837f034c21438183973417400c7ea96c","size":270,"data":"","first_seen":"2025-03-19T15:29:53.744585Z","last_seen":"2026-06-03T02:29:40.328638Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b6765015c5e7224cdef91cd0cd9a06","sha1":"be907e448116b5eee549ddbd76e83cd024c8fcdc","sha256":"e55e8171c4ed96cbfd0b6f92d1911923e10bcd883966f86f16eb1bd5c5221ba0","sha512":"af41b922a29705bc08dc4165ed64c15a3b9c1956dde52e9b1e86e89163a163911a071eb23933a079b571a7095512160f680cd115e5150ef4174db5d2eec5bf42","ssdeep":"3072:P4WHvprns33TOiig8e1ufZ63SAhe7C9dXnIL6LYUIWpZ:A+dngMHDf0iAk7CfXWfUI0Z","tlshash":"23248c5dbb1dd4dabea009e6af41a8fd6540b11f3c0e07812ccdd3b520dd97c2276a6a","size":216648,"data":"","first_seen":"2025-11-21T09:19:30.567025Z","last_seen":"2025-12-01T19:35:23.410494Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a06d3e1ae0655ec0f6803125cd63a67e","sha1":"bac4dfd8b55ecdef7643a67c5590f1c736ef2876","sha256":"a87f39e3470d15d7002ea77d1db8bd94bdda6b3e053bc2a83f215f6eab02555a","sha512":"ae8b0078cb655af1e7db5604c3c272a681ffdea0fa7fedec2c118a81caddb3c6e3caee6a2135014533b9d231a4bdf56451b94d19fec8950aaa10c4e34ca21b8d","ssdeep":"6144:xBHIynrzfnU7bRq6cmYmy94WSgfrJ0dV23YPaxap+whxlq7CzEagN:4Dc/OdV2olg75","tlshash":"6b84f6ca7282b0a653e311f9d02f040be33a5955284d4428f265f8e6387956eb3b7f7d","size":394649,"data":"","first_seen":"2025-11-20T20:22:27.742622Z","last_seen":"2025-12-01T19:35:23.388406Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","size":20160,"data":"","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.19444.m.8e3ccd6e.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"559c6956a4d2dcf4a2f07ad0232ed5ab","sha1":"da9f64fccbd7b21c6c6579e5ca67160d356ccaa0","sha256":"04da362d7171debfabbe299ec634cff1818c2714d6cf0d190ac8e3f7b5cf4c6b","sha512":"59e5cee2efb745ad2599e9638e631e0e0ec015c6c462a91e877c97fceff1569d0e0ba9ada6b17cb73df7e0f0d80ead6c79d9ec80f72bc2dc0621b8a6dd785898","ssdeep":"","tlshash":"423144d178c56843425b74d6d0bb8045b93ddfd52a2c7440f3dd90662876798a533bcd","size":1622,"data":"","first_seen":"2025-11-21T20:38:40.634395Z","last_seen":"2026-04-28T18:28:11.437653Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/?nlp=0","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"83aaee9c503263aab2a7a6e03533b914","sha1":"ff58ff93efd47fb214fe6d9082453ac98212ed70","sha256":"fdf456efbc82d67f547d67a79c760a84064fa553a22829a2ede0d74b787f4f61","sha512":"0ed3bf11c9eb7c410894dfc026a08aa4fe7ff9327e7ebb46f4921d4e5d2f155c34ab1078f24a990a34eca8386c8054211c1c7037c52e1ec07a5ac8b1fa0d4732","ssdeep":"","tlshash":"6be02b359c61143048dd089d78afa7d83d316551a30ab110641cc9811470fcf8171fdb","size":418,"data":"","first_seen":"2024-12-04T17:01:08.332815Z","last_seen":"2026-06-14T21:57:41.947889Z","times_seen":10487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/?nlp=0","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a024cc319d568b37b4e72068d7d858a1","sha1":"fffc2dea83dc4a7faa27da47912482d183481133","sha256":"b0641a9e4e525e3f965fe62d8e416a762dad6932bf6b1e8aa6f1d7cd6586a1ee","sha512":"c520cbe402a782c3e9a87a9598dbb26cbe0ceb1024aadd3d1491c7a57da7005aa651f8550008a8fef94f523cc7c46072a42f8652ba5aff6de64a8bffaec38217","ssdeep":"","tlshash":"8621ada8572c397312bb0381afd777067272629ee5404581823eb341ac61f4bce1aecb","size":1265,"data":"","first_seen":"2025-07-04T09:27:30.949714Z","last_seen":"2026-06-07T11:32:52.831753Z","times_seen":8172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a06d3e1ae0655ec0f6803125cd63a67e","sha1":"bac4dfd8b55ecdef7643a67c5590f1c736ef2876","sha256":"a87f39e3470d15d7002ea77d1db8bd94bdda6b3e053bc2a83f215f6eab02555a","sha512":"ae8b0078cb655af1e7db5604c3c272a681ffdea0fa7fedec2c118a81caddb3c6e3caee6a2135014533b9d231a4bdf56451b94d19fec8950aaa10c4e34ca21b8d","ssdeep":"6144:xBHIynrzfnU7bRq6cmYmy94WSgfrJ0dV23YPaxap+whxlq7CzEagN:4Dc/OdV2olg75","tlshash":"6b84f6ca7282b0a653e311f9d02f040be33a5955284d4428f265f8e6387956eb3b7f7d","size":394649,"data":"","first_seen":"2025-11-20T20:22:27.742622Z","last_seen":"2025-12-01T19:35:23.388406Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","size":20160,"data":"","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","size":5675,"data":"","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://afd36e3c-6115-4459-8b56-4bb832c26172/injections/js/bug1731825-office365-email-handling-prompt-autohide.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"7c873167b5d35fd9f6690071701d4669","sha1":"f897afe9818a00a80e98bdbc67e7f67343f89378","sha256":"014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a","sha512":"85f4b41add3c875f2d15feb5d8684c371dd19839e8c711f8570dc0eeab82faf5374373d350d82f3c0dc62316db450ed3e67c0b01537f6081846b8cc777090994","ssdeep":"","tlshash":"3e1102dfa4a32253142200fd2b4b6885d1bf89167338d5c5754ac2603fa044e53fadca","size":995,"data":"","first_seen":"2023-04-11T22:15:44Z","last_seen":"2026-06-07T07:22:14.275965Z","times_seen":70237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","size":22408,"data":"","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://afd36e3c-6115-4459-8b56-4bb832c26172/injections/js/bug1731825-office365-email-handling-prompt-autohide.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"7c873167b5d35fd9f6690071701d4669","sha1":"f897afe9818a00a80e98bdbc67e7f67343f89378","sha256":"014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a","sha512":"85f4b41add3c875f2d15feb5d8684c371dd19839e8c711f8570dc0eeab82faf5374373d350d82f3c0dc62316db450ed3e67c0b01537f6081846b8cc777090994","ssdeep":"","tlshash":"3e1102dfa4a32253142200fd2b4b6885d1bf89167338d5c5754ac2603fa044e53fadca","size":995,"data":"","first_seen":"2023-04-11T22:15:44Z","last_seen":"2026-06-07T07:22:14.275965Z","times_seen":70237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3dfb2bbfd168dd5eec5f933b2fd67b4","sha1":"c1a42c2d0683114f2fbacc6c10a6dcc888fc4da3","sha256":"d0be3681c84de61c15b2a43ef1e7880db99b80b3e1216b6edec81fb35dfbd0a6","sha512":"0caf49e9ebaf367d031440693d6cc01a0d1e6d5ea582298460816124384590933e3bf1341b7bdca89d32305428c7f046f108b6aca5faee858aa350f766f94da6","ssdeep":"","tlshash":"8c01ce5ef7822c4913624135664fb04592b142163a29ded2f319eea259b8c8c4527fe9","size":804,"data":"","first_seen":"2025-03-19T15:29:53.74587Z","last_seen":"2026-06-03T02:29:40.330208Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7623c0d58ca0ed07b1d8a108e4f64489","sha1":"5d97407b3b47923e53ffd1c38273714a2c6dcd99","sha256":"2e008de556c2960588d77692330090a142a7fff3f07c8b90098ccd944ada36f7","sha512":"cf811a6f341f10f059573c7bdf11955ca9dfd6a07e4d613bf0d1ee21aa9559d940934a8a1f618eca1d2c66a695538bbc37f6026504a44c2b1fcdda001e557518","ssdeep":"","tlshash":"78e02ba7f0ca04441d412e28e1ca3545d466d216b3025fe1837d97b3e5a248faa4af08","size":411,"data":"","first_seen":"2025-04-18T13:55:48.647648Z","last_seen":"2026-05-30T16:52:38.488315Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"94b3c8f8408d2133c2624a6b0e71432d","sha1":"2c9495519aeab3a9f69dff25869e9633a146c9c8","sha256":"25d53b1f05f614d0855fb66a4b1b34798241ff6d87a156b41a434a98a6641c5e","sha512":"51ef50474d19ae0ab34d13d63a00e9e1eee03020e7a73aa706777c4cbdbc1cf33e325b4a1a9e25dbd05190ec1118fbf0f41abddfa4ab14c1533b0da9ab04cdee","ssdeep":"","tlshash":"d850000000f030c0000000003000030c0000fcc30c03c030000000003c0f0003030030","size":10,"data":"","first_seen":"2023-04-19T08:56:40Z","last_seen":"2026-06-03T02:29:40.329477Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"83aaee9c503263aab2a7a6e03533b914","sha1":"ff58ff93efd47fb214fe6d9082453ac98212ed70","sha256":"fdf456efbc82d67f547d67a79c760a84064fa553a22829a2ede0d74b787f4f61","sha512":"0ed3bf11c9eb7c410894dfc026a08aa4fe7ff9327e7ebb46f4921d4e5d2f155c34ab1078f24a990a34eca8386c8054211c1c7037c52e1ec07a5ac8b1fa0d4732","ssdeep":"","tlshash":"6be02b359c61143048dd089d78afa7d83d316551a30ab110641cc9811470fcf8171fdb","size":418,"data":"","first_seen":"2024-12-04T17:01:08.332815Z","last_seen":"2026-06-14T21:57:41.947889Z","times_seen":10487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","size":321856,"data":"","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d309d6a365e12c558a514ef365af1554","sha1":"1698d9e0577c834c3886a88f376a0f081dcc4e32","sha256":"da36ced8a30779cbae8eb90c68d41032de6426915554b79c910af57d160452c7","sha512":"b92a9e982d9b18aee0eac381486beefca0bf3029bd9294964b4b26b3fa5dd6075b6e5528a0e48392ca61aea417a5bd4f83664d8c44c99f59c9a7fa0d8f3366fb","ssdeep":"","tlshash":"9ad02b33d52da0129207002c9501263ec58424837f034c21438183973417400c7ea96c","size":270,"data":"","first_seen":"2025-03-19T15:29:53.744585Z","last_seen":"2026-06-03T02:29:40.328638Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3dfb2bbfd168dd5eec5f933b2fd67b4","sha1":"c1a42c2d0683114f2fbacc6c10a6dcc888fc4da3","sha256":"d0be3681c84de61c15b2a43ef1e7880db99b80b3e1216b6edec81fb35dfbd0a6","sha512":"0caf49e9ebaf367d031440693d6cc01a0d1e6d5ea582298460816124384590933e3bf1341b7bdca89d32305428c7f046f108b6aca5faee858aa350f766f94da6","ssdeep":"","tlshash":"8c01ce5ef7822c4913624135664fb04592b142163a29ded2f319eea259b8c8c4527fe9","size":804,"data":"","first_seen":"2025-03-19T15:29:53.74587Z","last_seen":"2026-06-03T02:29:40.330208Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","size":5675,"data":"","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a024cc319d568b37b4e72068d7d858a1","sha1":"fffc2dea83dc4a7faa27da47912482d183481133","sha256":"b0641a9e4e525e3f965fe62d8e416a762dad6932bf6b1e8aa6f1d7cd6586a1ee","sha512":"c520cbe402a782c3e9a87a9598dbb26cbe0ceb1024aadd3d1491c7a57da7005aa651f8550008a8fef94f523cc7c46072a42f8652ba5aff6de64a8bffaec38217","ssdeep":"","tlshash":"8621ada8572c397312bb0381afd777067272629ee5404581823eb341ac61f4bce1aecb","size":1265,"data":"","first_seen":"2025-07-04T09:27:30.949714Z","last_seen":"2026-06-07T11:32:52.831753Z","times_seen":8172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"94b3c8f8408d2133c2624a6b0e71432d","sha1":"2c9495519aeab3a9f69dff25869e9633a146c9c8","sha256":"25d53b1f05f614d0855fb66a4b1b34798241ff6d87a156b41a434a98a6641c5e","sha512":"51ef50474d19ae0ab34d13d63a00e9e1eee03020e7a73aa706777c4cbdbc1cf33e325b4a1a9e25dbd05190ec1118fbf0f41abddfa4ab14c1533b0da9ab04cdee","ssdeep":"","tlshash":"d850000000f030c0000000003000030c0000fcc30c03c030000000003c0f0003030030","size":10,"data":"","first_seen":"2023-04-19T08:56:40Z","last_seen":"2026-06-03T02:29:40.329477Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","size":22408,"data":"","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7623c0d58ca0ed07b1d8a108e4f64489","sha1":"5d97407b3b47923e53ffd1c38273714a2c6dcd99","sha256":"2e008de556c2960588d77692330090a142a7fff3f07c8b90098ccd944ada36f7","sha512":"cf811a6f341f10f059573c7bdf11955ca9dfd6a07e4d613bf0d1ee21aa9559d940934a8a1f618eca1d2c66a695538bbc37f6026504a44c2b1fcdda001e557518","ssdeep":"","tlshash":"78e02ba7f0ca04441d412e28e1ca3545d466d216b3025fe1837d97b3e5a248faa4af08","size":411,"data":"","first_seen":"2025-04-18T13:55:48.647648Z","last_seen":"2026-05-30T16:52:38.488315Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 73103\r\nlast-modified: Tue, 11 Nov 2025 13:32:39 GMT\r\nx-ms-request-id: f9cee981-a01e-0058-4d02-5827c8000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955147,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4e0b\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=73103\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T15:52:14.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:EB:38:13:66:CB:54:3F:6C:62:35:F2:D3:3C:66:7D:ED:FA:20:6F","sha256":"39:35:BF:CC:EC:88:80:E3:C4:5B:DE:DF:90:CF:5D:28:7F:E6:38:0D:1A:BD:72:B6:D3:06:E3:F6:4F:CD:3A:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: attachment.outlook.live.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 0\r\ncontent-type: text/plain\r\nlocation: https://attachment.outlook.live.net/mail/\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1\r\nrequest-id: 86f666f7-0aad-7033-f03e-2f0f5da4693b\r\nx-feserver: OS6P279CA0079\r\ndate: Tue, 25 Nov 2025 15:52:14 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":13709,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":106,"dns":89,"connect":3,"send":0,"wait":2,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2118\r\nlast-modified: Fri, 14 Nov 2025 13:39:16 GMT\r\nx-ms-request-id: 056f4c07-f01e-0008-7f02-58e598000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932466,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf572\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=2118\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675), with no line terminators","md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/framework/microsoft.svg","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /assets/framework/microsoft.svg HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1405\r\nlast-modified: Wed, 30 Aug 2023 00:34:56 GMT\r\nx-ms-request-id: fd4b084c-801e-002d-1c6d-a24ce4000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932492,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf58c\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=1405\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d2b8f25545a2894e2721e9fe528e34c","sha1":"d0dae76f4bf5c04acd5fcdf1bcb12908099e328c","sha256":"797bda35d13e5130fe5a14e0069c31b46ec1af6ea47f2d300309803bb4d2608c","sha512":"fe1f84af0ba1100b2a90ee6fbfbd3763ef34d1a3bf045345538302ece7d37eaadc9a9cd0e09c2030e62b13a55e118a2417b27f14336c271758bfb3e256906385","ssdeep":"","tlshash":"bf612eaa4204cbae1987c29cdf3ae865170f05eaf2aa22d958ffc77120975c8dd46814","first_seen":"2023-10-02T23:14:06Z","last_seen":"2026-06-14T21:57:41.908411Z","times_seen":6974,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7996\r\nlast-modified: Fri, 14 Nov 2025 13:39:11 GMT\r\nx-ms-request-id: 3968e79f-601e-0047-2502-5894cc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932467,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf573\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=7996\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22408), with no line terminators","md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/favicon.ico","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:EB:38:13:66:CB:54:3F:6C:62:35:F2:D3:3C:66:7D:ED:FA:20:6F","sha256":"39:35:BF:CC:EC:88:80:E3:C4:5B:DE:DF:90:CF:5D:28:7F:E6:38:0D:1A:BD:72:B6:D3:06:E3:F6:4F:CD:3A:A4"}}},"request":{"raw":"GET /mail/favicon.ico HTTP/1.1\r\nHost: attachment.outlook.live.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ClientId=15570E7092874E6D9E5C6629ED4CCC6C\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 9622\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 12 Nov 2025 02:29:57 GMT\r\naccept-ranges: bytes\r\netag: \"1dc537c3c7ae516\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1\r\nrequest-id: 86cd6ad4-bba8-ab11-1854-e6a4e3bcfb28\r\nx-proxy-backendserverstatus: 200\r\nx-calculatedbetarget: OSDP279MB1298.NORP279.PROD.OUTLOOK.COM\r\nx-feserver: OS6P279CA0079\r\nx-besku: UNKNOWN\r\nx-backendhttpstatus: 200\r\nx-proxy-routingcorrectness: 1\r\nx-firsthopcafeefz: OSL\r\nalt-svc: h3=\":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nms-cv: 1GrNhqi7EasYVOak47z7KA.1\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=OSL\u0026RemoteIP=91.90.42.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Default.mail\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9622,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"280295798011b759195663d1e11c8edf","sha1":"dd714f7b7fd1b9677f3c08f75dd63abaff77833a","sha256":"4296d6875e5fb2b893c6868244303c3c38d1423e85c41ab85dfc7e1834ea898c","sha512":"621799515fefd77f98e594515640600c28225cc6f3a77a4dcf76f2d092de79198a7aad9c0d64e833606788c66b37c303e73d5302d16edaadc48a70fc6d3e1196","ssdeep":"192:jvLkFKgO15THwibYwIt+PXU+BX/C8T61T18:jvL7nTQUYx+PXjFa8Oy","tlshash":"7f124bc57f08e856cd5a2631e133da08a5bc2fc48ed80a0dbd9974096673dc7193e6eb","first_seen":"2025-10-08T10:55:37.894154Z","last_seen":"2026-06-14T19:16:45.427228Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026client-id=NO_AUTH\u0026client-version=1DS-Web-JS-4.3.6\u0026apikey=56468f6991c348029c6bba403b444607-7f5d6cd1-7fbe-4ab1-be03-3b2b6aeb3eb4-7696\u0026upload-time=1764085946398\u0026time-delta-to-apply-millis=use-collector-delta\u0026w=0\u0026NoResponseBody=true","fqdn":"eu-office.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.116.104","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:27.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 30 Sep 2025 16:41:46 GMT","end":"Sun, 29 Mar 2026 16:41:46 GMT"},"fingerprint":{"sha1":"20:01:C9:AF:88:2C:83:C8:1E:A9:D5:2E:BC:F8:7A:C4:AA:DD:2A:6F","sha256":"BE:25:59:75:94:BD:40:78:F9:44:8B:A3:21:7E:FF:98:22:C2:A0:E5:4E:96:06:90:DC:9B:9D:E7:57:C1:FA:EE"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026client-id=NO_AUTH\u0026client-version=1DS-Web-JS-4.3.6\u0026apikey=56468f6991c348029c6bba403b444607-7f5d6cd1-7fbe-4ab1-be03-3b2b6aeb3eb4-7696\u0026upload-time=1764085946398\u0026time-delta-to-apply-millis=use-collector-delta\u0026w=0\u0026NoResponseBody=true HTTP/1.1\r\nHost: eu-office.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4218\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4218,"data":"{\"name\":\"clientstartupother\",\"time\":\"2025-11-25T15:52:26.393Z\",\"ver\":\"4.0\",\"iKey\":\"o:56468f6991c348029c6bba403b444607\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-4.3.6\"},\"metadata\":{\"f\":{\"RedirectCount\":{\"t\":6}}}},\"data\":{\"baseData\":{\"properties\":{\"version\":\"PostChannel=4.3.6\"}},\"AppName\":\"Mail\",\"UserAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"ExplicitLogon\":false,\"ClientId\":\"15570E7092874E6D9E5C6629ED4CCC6C\",\"RefUrl\":\"attachment.outlook.live.net%2Fmail%2F\",\"ClientVersion\":\"20251114001.19\",\"Session.Id\":\"93a28aef-59a2-40e5-ad13-e8e9a31b9e80\",\"PhysicalRing\":\"WW\",\"VariantEnv\":\"Prod\",\"BrowserName\":\"Firefox\",\"Host\":\"(none)\",\"BrowserVersion\":\"134,0\",\"OsName\":\"Windows\",\"OsVersion\":\"10\",\"Layout\":\"Desktop\",\"DeviceInfo\":\"{\\\"cores\\\":48}\",\"ErrorType\":\"ClientError\",\"ErrorSource\":\"Preboot\",\"Error\":\"Error: NeedsRedirectWithNlp\",\"ExtraErrorInfo\":\"666792/eL/m\u003c@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js:1:14848\\npromise callback*eL@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js:1:14631\\nasync*eU@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js:1:12733\\n750077/h/this.importAndExecute/\u003c@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js:2:263216\\npromise callback*750077/h/this.importAndExecute@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js:2:263195\\neV@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js:2:19528\\nasync*ty@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js:2:26538\\n210594@https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js:2:48417\\nI@https://res.public.onecdn.static.microsoft/owamail/\",\"BootResult\":\"nlp\",\"BottleneckTiming\":\"{}\",\"Bottlenecks\":\"{}\",\"Layers\":\"{\\\"imprt\\\":31,\\\"dw\\\":1,\\\"rbsp\\\":2}\",\"BootType\":\"NoCache\",\"Diagnostics\":\"{\\\"owaBackfilledErrors\\\":\\\"\\\"}\",\"RedirectCount\":0,\"MsalEnabled\":true,\"AuthStatus\":\"None\",\"MiscData\":\"\u0026vm=true\u0026sp=https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/\u0026pltScripts=owa.mail.runtime.0c76e962.js,owa.mailindex.a6f9517e.js,owa.71719.m.d9201d32.js,owa.77640.m.54967c08.js,owa.MsalAuth.m.c865d914.js,owa.94868.m.b71f002c.js,owa.15509.m.c29b4020.js,owa.19444.m.8e3ccd6e.js\u0026ehk=undefined\u0026msg=undefined\u0026bf=auth-cacheTokenForMetaOsHub,auth-useAuthTokenClaimsForMetaOsHub,auth-codeChallenge,auth-msaljs-eventify,cal-store-NavBarData,auth-msaljs-newsletters,auth-msaljs-meet,auth-msaljs-places,auth-msaljs-bookings,auth-msaljs-findtime,auth-msaljs-landingpage,auth-msaljs-business,auth-msaljs-consumer,pe1416235c1,pe1444542c1,pe14456012,shellmultiorigin,cal-perf-useassumeoffset,cal-perf-eventsinofflinestartupdata,acct-add-account-e1-improvement,cal-perf-eventsinstartupdatabyviewtype,workerasyncload,cal-reload-pause,acctstartdataowav2,auth-msaljs-places-sessionstorage,acctpersistentidindexerv2,fwk-enforce-trusted-types,auth-disableanonymoustokenforheader,auth-msaljs-safari,msplaces-hosted-localsessiondata-v2,msplaces-app-boot-sequence,fwk-enable-default-trusted-types-policy,fwk-enable-redirect-new-olkerror-page,auth-msaljs-hostedplaces,fwk-enable-owa-loop-trusted-types-policy,fwk-init-acc-locstore,fwk-createstore-deffered,auth-msaljs-domainhint,auth-tokencache-expirydate,fwk-getcopilot-fromstartup,auth-mon-removefallbacktogatfr,auth-hosted-removefallbacktogatfr,cal-appcaching-reloadonerror,auth-msaljs-consumer-boot-errorhandler,pr1539892c19,pr16347118,pr1678340c7,cal-enable-scheduling-poll,acct-icloudOAuthOobe,nh-enableOutlookMigrationInteropRefactor,nh-enableDiagnosticsInteropRefactor\u0026nt=0\u0026swVer=undefined\u0026cdnProvider=Akamai\u0026nextHopProtocol=h2\u0026cacheResult=undefined\u0026cacheAge=undefined\u0026cacheVer=undefined\u0026cacheHost=undefined\",\"Timings\":\"{\\\"rbsp_s\\\":1328,\\\"imprt_e\\\":1328,\\\"imprt_s\\\":1297,\\\"dw_s\\\":1328,\\\"dw_e\\\":1329,\\\"rbsp_e\\\":1330,\\\"msal_s\\\":1330,\\\"in_e\\\":26,\\\"rt_s\\\":508,\\\"rt_e\\\":833,\\\"mi_s\\\":509,\\\"mi_e\\\":857,\\\"auth\\\":{\\\"msalis\\\":1330,\\\"msalie\\\":1511,\\\"fgatmsals\\\":1511,\\\"silogs\\\":1531,\\\"silogse\\\":11596}}\",\"Memory\":\"{}\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: MC1=GUID=7811d2fba7de442aaeb76de913b57b40\u0026HASH=7811\u0026LV=202511\u0026V=4\u0026LU=1764085947065; Domain=.microsoft.com; Expires=Wed, 25 Nov 2026 15:52:27 GMT; Path=/;Secure; SameSite=None\nMS0=e60d10d821554686a237502d1a171786; Domain=.microsoft.com; Expires=Tue, 25 Nov 2025 16:22:27 GMT; Path=/;Secure; SameSite=None\r\ntime-delta-millis: 667\r\naccess-control-allow-headers: P3P,Set-Cookie,time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://attachment.outlook.live.net\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":56,"dns":0,"connect":21,"send":0,"wait":37,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.31586.m.b20432c6.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.31586.m.b20432c6.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 756152\r\nlast-modified: Wed, 19 Nov 2025 00:32:53 GMT\r\nx-ms-request-id: 865e65c2-801e-002d-1d09-594ce4000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932519,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf5a7\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=756152\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3026182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"2027957ab8af59360c9ed01d0493f7ed","sha1":"53b6f9589bac61f46006c4c732499211a35c5348","sha256":"5853dd72aa804cee9db99aac544ddb7ead245517b2e681c103729bfab30917e4","sha512":"641f1df432d851dbfb8f279379f6b71251d83b853db6b4647f5ef0c8ec37285b78835f19f59c5455b5df2202a36b825755808b4fa2558191a81affb6dc1363a9","ssdeep":"24576:gsVwoLw2ZH46BjXamNAIX92Gtye4xFFjH4+mzfYyWhqyU0snM3/zfZHzGIio0Vet:TaoLwsBjXamNAIX92Gtye4vFjH4+mzfc","tlshash":"c8256dd5b74170386397829ec17f4885e3393918a80d48b8f6b6d8dd24e8ac87277fb5","first_seen":"2025-11-20T20:22:27.749259Z","last_seen":"2025-12-05T00:46:59.84526Z","times_seen":51,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":196,"dns":98,"connect":8,"send":0,"wait":13,"receive":37,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 73103\r\nlast-modified: Tue, 11 Nov 2025 13:32:39 GMT\r\nx-ms-request-id: f9cee981-a01e-0058-4d02-5827c8000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932465,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf571\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=73103\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/images/ms-logo-v2.jpg","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.231.128.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","date":"2025-11-25T15:52:16.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 24 Oct 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:B2:DA:54:D0:B6:60:FB:FF:3E:AC:5B:68:CB:51:1D:A8:DE:B7:EF","sha256":"5D:06:66:C2:CE:6B:2C:9F:59:F6:92:81:5F:0A:8E:C3:7A:D3:7A:C2:DE:80:F2:6D:AB:F2:A1:BC:B6:45:02:A3"}}},"request":{"raw":"GET /images/ms-logo-v2.jpg HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000\r\nContent-Type: image/jpeg\r\nLast-Modified: Mon, 17 Nov 2025 08:49:20 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0a859109f57dc1:0\"\r\nx-ms-request-id: 57fb3de1-1fb8-4540-9960-3fcf3c9ee167\r\nPPServer: PPV: 30 H: SN1PEPF0002FA71 V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nDate: Tue, 25 Nov 2025 15:52:16 GMT\r\nContent-Length: 2797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 107x23, components 3","md5":"5ec86907c1ac5ef3e117723998feb8be","sha1":"5daa2fea5a34b0479a33698fc875f9f6c0581fd2","sha256":"bc2b16b51738b77d94ed7591ad1033fa804297ca9faaa35222aa65773f749164","sha512":"ac052ed698bc59b14694c6a47979d20819658620896831e9a538c33aa0083659f2926773ffc3082c9965736c7c6ef11daccba8dd3b3c427b535ee2b88ba435e5","ssdeep":"","tlshash":"9351fb4db6006c40d5f867f05fe2c6229e562090fb83b57ea4a5d009f4a11b39b1b1cf","first_seen":"2023-05-16T15:11:52Z","last_seen":"2026-06-03T02:29:40.327792Z","times_seen":492,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.77640.m.54967c08.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7108\r\nlast-modified: Fri, 14 Nov 2025 13:39:15 GMT\r\nx-ms-request-id: e941b701-201e-000b-6e02-5804fc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955674,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb501a\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=7108\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20160), with no line terminators","md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.worker.data.820f8cc4.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.worker.data.820f8cc4.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attachment.outlook.live.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 98449\r\nlast-modified: Sat, 15 Nov 2025 06:30:35 GMT\r\nx-ms-request-id: f4046e74-401e-0040-6a02-58f8af000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955722,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb504a\u0026TotalRTCDNTime=45\u0026CompressionType=br\u0026FileSize=98449\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=45, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31598)","md5":"e920712227eca4339d356fb7b05e7cda","sha1":"add539dc0d0ca0e4da7f901f29a42a3cd243faa4","sha256":"8ca3529643892d1d4ec965f860f18f569d2dbc68f3000cd609a49fe8437ea1b2","sha512":"a6d17b2f4d0adc7f5749010b78ba38ddff205bb7d883d8ebda5ec7ff39d9a3c85b236459119c03309d4800a7a86c2a4cb3b10e5b56802a72cc886f76a28b83fd","ssdeep":"6144:aApizQFCoYc2JZ9Ar4woYAO8x/MiBTcn10:5QCoYAOAB6q","tlshash":"615429cdb392b06613a311b5803f500bf33b2959180d4528f6a5e9e63cb995da27bf7c","first_seen":"2025-11-21T20:38:40.643026Z","last_seen":"2025-12-04T09:58:44.264679Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 128633\r\nlast-modified: Sat, 15 Nov 2025 06:31:12 GMT\r\nx-ms-request-id: 5a46d845-b01e-0036-5102-5872e7000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932510,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf59e\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=128633\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34469)","md5":"a06d3e1ae0655ec0f6803125cd63a67e","sha1":"bac4dfd8b55ecdef7643a67c5590f1c736ef2876","sha256":"a87f39e3470d15d7002ea77d1db8bd94bdda6b3e053bc2a83f215f6eab02555a","sha512":"ae8b0078cb655af1e7db5604c3c272a681ffdea0fa7fedec2c118a81caddb3c6e3caee6a2135014533b9d231a4bdf56451b94d19fec8950aaa10c4e34ca21b8d","ssdeep":"6144:xBHIynrzfnU7bRq6cmYmy94WSgfrJ0dV23YPaxap+whxlq7CzEagN:4Dc/OdV2olg75","tlshash":"6b84f6ca7282b0a653e311f9d02f040be33a5955284d4428f265f8e6387956eb3b7f7d","first_seen":"2025-11-20T20:22:27.742622Z","last_seen":"2025-12-01T19:35:23.388406Z","times_seen":118,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":193,"dns":112,"connect":1,"send":0,"wait":10,"receive":7,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.ddf3b781.css","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.AppBoot.m.ddf3b781.css HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 22685\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Nov 2025 13:39:14 GMT\r\nx-ms-request-id: ddd36f90-001e-0041-3102-58a773000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955135,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4dff\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=22685\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134777,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65184), with no line terminators","md5":"9cf5c80c04e94a8ac0b29f0e6f97aace","sha1":"8b130e5371caf1041ed3e2a3cdd1ed6f7c95cc9a","sha256":"02f2ccd2eec49e1afaf1d5a772f4107ccf4ca7ef604ba47b0087ce05061c97eb","sha512":"b496d63b91a7976141b94a2e94643f6cdf8520f6c92dab52dda6e657563d92f5af41f8d87b401014b48233f9d204783a5fb551faa9d2bc0411638dce3ec7a3b1","ssdeep":"768:z7lGOVMKgyMKgxiwUxgFt6od9VUVVmLOE3dZt3KZAKB9uN9BY1cc3WVYUDNUUA41:tbSBhLGMOEZIqAutI6Dl","tlshash":"33d3b66b8530323c762bed2697cc576d9315f06799012bf6e856a224c7c3fe606b324e","first_seen":"2025-11-20T20:22:27.722839Z","last_seen":"2025-12-05T00:46:59.811812Z","times_seen":40,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.faccbd8c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.AppBoot.m.faccbd8c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 578860\r\nlast-modified: Thu, 20 Nov 2025 20:12:08 GMT\r\nx-ms-request-id: e47fe78f-d01e-000f-1f63-5a89fb000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955146,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4e0a\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=578860\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2063716,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2be1cf237c07e9b10e0ca7553c5ca79e","sha1":"868d82c08d49d105254a4792a80046670b321e78","sha256":"544f5a6d4b72f19ff26a8a086ed2338b52e9a121b73e8ef1e111b3726a3abd9f","sha512":"8deb4ec75d3abb3456d134f0f8689cd39a7de23f3e1bf1dbbc89c17f5a0544d1cbb23559b5b7d1a15a5d31c53133153d9a694fafda4d88e9a7086554093fd315","ssdeep":"12288:1DRvVsOdPUOS5Cft3xVZ065vf1KyDScX2e1BuecOsPOIuzdv0Y5O9d:1DRvVsOdQ63xVy6z12eTuKsPLuzN0pd","tlshash":"93257de2314335ee97db85e9e01f048493f559181a4a0c78f174edeb24a4589b2f3fba","first_seen":"2025-11-20T20:22:27.767307Z","last_seen":"2025-12-04T22:39:15.33144Z","times_seen":28,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7996\r\nlast-modified: Fri, 14 Nov 2025 13:39:11 GMT\r\nx-ms-request-id: 3968e79f-601e-0047-2502-5894cc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955163,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4e1b\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=7996\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22408), with no line terminators","md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7996\r\nlast-modified: Fri, 14 Nov 2025 13:39:11 GMT\r\nx-ms-request-id: 3968e79f-601e-0047-2502-5894cc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955684,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb5024\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=7996\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22408), with no line terminators","md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/mail/pwa/v4/pngs/apple-touch-icon.png","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /assets/mail/pwa/v4/pngs/apple-touch-icon.png HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15472\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Oct 2025 15:48:51 GMT\r\nx-ms-request-id: e4a46629-c01e-003c-3a5e-3cd650000000\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955780,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb5084\u0026TotalRTCDNTime=8\u0026CompressionType=\u0026FileSize=15472\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"86a05116c92778b3513ba7d9cdee5e21","sha1":"1c7a6c1e1ddeb854bb5f4da98f665fabf2d7af75","sha256":"703e207bb1f322fd288bc4d30f6c4ce2d5f88f2ed126bd98f8e5535b84c67aa3","sha512":"538537ec04113ea48c45e24d55b1da46f8542609c8622acc22de09bc67c10a4525251a79b1ca12728a46b52eaec72f67d5164268e897ed9872012f5686fcb642","ssdeep":"384:Yvvv5WCo1/m0uzWuaIPvKOSXsPCr7jcU/3TEQDZhI7knq5km6u:Yvvv5WCSuzWuzKTbr7wU/3TEWZaogf6u","tlshash":"6e62d1028899caecb0eed19d5630c1f1d5c21c9b498bbd8e7854a4e944bdece1b8c7c3","first_seen":"2025-10-15T07:27:42.583994Z","last_seen":"2026-06-14T19:16:45.408736Z","times_seen":690,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.MsalAuth.m.c865d914.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7996\r\nlast-modified: Fri, 14 Nov 2025 13:39:11 GMT\r\nx-ms-request-id: 3968e79f-601e-0047-2502-5894cc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652933658,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafa1a\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=7996\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22408), with no line terminators","md5":"1096eb3cd7bd4d82f0a8c3628884750d","sha1":"e446b78a9e92f6c9ae5dfb03ab1a6faed4823155","sha256":"25a6f7ddd5c5bfa32f5bc5401031d19a7c68802bd3ecbdf1fc394cb19eafc5fc","sha512":"e427e1c910732553d69512932a620a91760122017672666d61ddc9632a3244616772363671c75fd1871aecb623f56138b550683f8ea0fc306e6d96dcb45cbec0","ssdeep":"384:x1y64Df73jyOD42AVRRLTOXSy2cN+k2d1np7Dv+iktPicsj+RRx4ss5Bg:f4DfqODZARSSi23BDmpRrzsA","tlshash":"d8a2f6d5b3a2b017b3ca05d8a1fb1105a259685d58be444cf3f87a82386178d63e3f7e","first_seen":"2025-11-20T20:22:27.730685Z","last_seen":"2025-12-05T00:46:59.84973Z","times_seen":152,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.worker.data.820f8cc4.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.worker.data.820f8cc4.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attachment.outlook.live.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 98449\r\nlast-modified: Sat, 15 Nov 2025 06:30:35 GMT\r\nx-ms-request-id: f4046e74-401e-0040-6a02-58f8af000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652933747,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafa73\u0026TotalRTCDNTime=45\u0026CompressionType=br\u0026FileSize=98449\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=45, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31598)","md5":"e920712227eca4339d356fb7b05e7cda","sha1":"add539dc0d0ca0e4da7f901f29a42a3cd243faa4","sha256":"8ca3529643892d1d4ec965f860f18f569d2dbc68f3000cd609a49fe8437ea1b2","sha512":"a6d17b2f4d0adc7f5749010b78ba38ddff205bb7d883d8ebda5ec7ff39d9a3c85b236459119c03309d4800a7a86c2a4cb3b10e5b56802a72cc886f76a28b83fd","ssdeep":"6144:aApizQFCoYc2JZ9Ar4woYAO8x/MiBTcn10:5QCoYAOAB6q","tlshash":"615429cdb392b06613a311b5803f500bf33b2959180d4528f6a5e9e63cb995da27bf7c","first_seen":"2025-11-21T20:38:40.643026Z","last_seen":"2025-12-04T09:58:44.264679Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.microsoftonline.com/consumers/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3A%3Aoutlook.office.com%3A%3AMBI_SSL%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Fattachment.outlook.live.net%2Fmail%2FoauthRedirect.html\u0026client-request-id=df32f1b3-bf8c-ff1e-6ba4-70a543807c50\u0026response_mode=fragment\u0026client_info=1\u0026prompt=none\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CaHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=4.26.0\u0026response_type=code\u0026code_challenge=BidAr5J_vmu8_GvVgLnVzSodfnD0zehW519EPROftoE\u0026code_challenge_method=S256","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"ip":{"addr":"40.126.53.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stamp2.login.microsoftonline.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 29 Oct 2025 20:25:32 GMT","end":"Mon, 27 Apr 2026 20:25:32 GMT"},"fingerprint":{"sha1":"38:D7:C8:A9:CB:71:F9:82:0A:CE:A9:72:9E:AD:2D:71:7A:DC:8B:94","sha256":"46:42:B1:56:33:CC:4C:4F:C4:A5:36:C7:EA:0C:A9:59:BD:24:0C:A5:18:BC:0A:67:FA:78:EC:16:99:E7:D7:7A"}}},"request":{"raw":"GET /consumers/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3A%3Aoutlook.office.com%3A%3AMBI_SSL%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Fattachment.outlook.live.net%2Fmail%2FoauthRedirect.html\u0026client-request-id=df32f1b3-bf8c-ff1e-6ba4-70a543807c50\u0026response_mode=fragment\u0026client_info=1\u0026prompt=none\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CaHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=4.26.0\u0026response_type=code\u0026code_challenge=BidAr5J_vmu8_GvVgLnVzSodfnD0zehW519EPROftoE\u0026code_challenge_method=S256 HTTP/1.1\r\nHost: login.microsoftonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-store, no-cache\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nlocation: https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\np3p: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nx-ms-request-id: 9f608423-5ddc-4b75-a624-ced220212201\r\nx-ms-ests-server: 2.1.22549.4 - FRC ProdSlices\r\nx-ms-clitelem: 1,0,0,,\r\nx-ms-srs: 1.P\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-MGT27TG1JJLlUZWOR5owqA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All\r\nx-xss-protection: 0\r\nset-cookie: esctx-2MaX5bvGI8M=AQABCQEAAABlMNzVhAPUTrARzfQjWPtK5HfMo-HpB7SCYsXe_UcyJBkXRdn6yjQr1fqfgtzHUzwwCkwYPdIXaAL6zXVpOw0y4GFXGZtyCqpdNnsYiz_bPWkWJUo5vGbKFAOgoZBGRb_YMJAsfN1qrShu7-bz2HaqqbtfKV09z_ZX0XNqgy30rCAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nfpc=AhjCjUGAiX5Pnp-iLZaRDvs; expires=Thu, 25-Dec-2025 15:52:16 GMT; path=/; secure; HttpOnly; SameSite=None\nx-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly\nstsservicecookie=estsfd; path=/; secure; samesite=none; httponly\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\ncontent-length: 1043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4878,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":99,"dns":59,"connect":10,"send":0,"wait":44,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 73103\r\nlast-modified: Tue, 11 Nov 2025 13:32:39 GMT\r\nx-ms-request-id: f9cee981-a01e-0058-4d02-5827c8000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955638,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4ff6\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=73103\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.mailindex.a6f9517e.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 128633\r\nlast-modified: Sat, 15 Nov 2025 06:31:12 GMT\r\nx-ms-request-id: 5a46d845-b01e-0036-5102-5872e7000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955094,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4dd6\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=128633\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34469)","md5":"a06d3e1ae0655ec0f6803125cd63a67e","sha1":"bac4dfd8b55ecdef7643a67c5590f1c736ef2876","sha256":"a87f39e3470d15d7002ea77d1db8bd94bdda6b3e053bc2a83f215f6eab02555a","sha512":"ae8b0078cb655af1e7db5604c3c272a681ffdea0fa7fedec2c118a81caddb3c6e3caee6a2135014533b9d231a4bdf56451b94d19fec8950aaa10c4e34ca21b8d","ssdeep":"6144:xBHIynrzfnU7bRq6cmYmy94WSgfrJ0dV23YPaxap+whxlq7CzEagN:4Dc/OdV2olg75","tlshash":"6b84f6ca7282b0a653e311f9d02f040be33a5955284d4428f265f8e6387956eb3b7f7d","first_seen":"2025-11-20T20:22:27.742622Z","last_seen":"2025-12-01T19:35:23.388406Z","times_seen":118,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.77640.m.54967c08.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7108\r\nlast-modified: Fri, 14 Nov 2025 13:39:15 GMT\r\nx-ms-request-id: e941b701-201e-000b-6e02-5804fc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932530,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf5b2\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=7108\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20160), with no line terminators","md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":197,"dns":99,"connect":8,"send":0,"wait":17,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2118\r\nlast-modified: Fri, 14 Nov 2025 13:39:16 GMT\r\nx-ms-request-id: 056f4c07-f01e-0008-7f02-58e598000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652933645,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafa0d\u0026TotalRTCDNTime=4\u0026CompressionType=br\u0026FileSize=2118\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675), with no line terminators","md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/?nlp=0","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T15:52:26.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:EB:38:13:66:CB:54:3F:6C:62:35:F2:D3:3C:66:7D:ED:FA:20:6F","sha256":"39:35:BF:CC:EC:88:80:E3:C4:5B:DE:DF:90:CF:5D:28:7F:E6:38:0D:1A:BD:72:B6:D3:06:E3:F6:4F:CD:3A:A4"}}},"request":{"raw":"GET /mail/?nlp=0 HTTP/1.1\r\nHost: attachment.outlook.live.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ClientId=15570E7092874E6D9E5C6629ED4CCC6C; msal.cache.encryption=%7B%22id%22%3A%22019abbb7-3071-7778-a0b6-f5a4cf38878f%22%2C%22key%22%3A%22UgOxu8JPX1iAUnC2_0DuE_f3rJD_GCcxMyKVgVFLdpQ%22%7D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nrequest-id: 274f543f-1bb2-6a05-55c3-3e4fa2960ae9\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-preferredroutingkeydiagnostics: 0\r\nx-calculatedbetarget: OSWP279MB0471.NORP279.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200\r\nx-web-server-version: 25.11.10.2\r\nx-clique: CLNORP279OSL00\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-YFgvNIpps2bHB/Xn3N3p0g==' *.res.office365.com *.fluidpreview.office.net wss://*.delve.office.com:443 shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' acdn.adnxs.com cdn.adnxs.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com 'self' attachment.outlook.live.net *.adnxs.com api.taboola.com api.msn.com ris.api.iris.microsoft.com srtb.msn.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com login.live.com *.sharepoint.de login.live.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net attachment.outlook.live.net blob:; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' attachment.outlook.live.net *.adnxs.com *.engage.cloud.microsoft attachments.office.net attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy 'allow-duplicates'; report-uri https://csp.microsoft.com/report/OutlookWeb-Mail-PROD; upgrade-insecure-requests;\r\nx-app-name: Mail\r\nreferrer-policy: strict-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\norigin-trial: Apss6avQMrDIaTfgtZghJaQJ5VC/PhuSEosafJ3+aDW1VPwBTFN43bgy2UNZLHt2hChKB1jWn+sAk2g6a9Svaw0AAABteyJvcmlnaW4iOiJodHRwczovL2xpdmUuY29tOjQ0MyIsImZlYXR1cmUiOiJMb25nQW5pbWF0aW9uRnJhbWVUaW1pbmciLCJleHBpcnkiOjE3MTY5NDA3OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nlink: \u003chttps://res.public.onecdn.static.microsoft/\u003e; rel=\"preconnect\"\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-client-version: 20251114001.19\r\nx-besku: UNKNOWN\r\nx-proxy-routingcorrectness: 1\r\nalt-svc: \":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nx-proxy-backendserverstatus: 200\r\nx-firsthopcafeefz: OSL\r\nx-bepartition: Clique/CLNORP279OSL00\r\nx-feproxyinfo: OS6P279CA0079.NORP279.PROD.OUTLOOK.COM\r\nx-feefzinfo: OSL\r\nms-cv: P1RPJ7IbBWpVwz5PopYK6Q.1\r\nx-powered-by: ASP.NET\r\nx-feserver: OS6P279CA0079\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13709,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (13709), with no line terminators","md5":"a53effd64232448eb04d40ccd525666e","sha1":"0dd95d1753e96bc4c03688ed27c81175043af09f","sha256":"246ec70628b706a85c734e9beee21adc81344a9e3c7a9d4bb8c5f12e12adea12","sha512":"5f8650181f3fbd16ac21a5b58961d7409e768d1705d6830e80cb9fcff3cdc57b0e0d300314328214fe48a984ae36b653b8f4d8b2d61d8f9d8af74fe1f0a150ea","ssdeep":"192:H4YZZ4cBBLwzxBJHUFSvVikgslQGpr1TODBlbbnwNKx3PDtkt60:HVZ4sLw9BJAMQw16DBhbfAt","tlshash":"5552fb511844903afb13e37671e6ff0d377ab187fc138a5c929da2e808c1fd88a57a56","first_seen":"2025-11-25T15:52:46.214577Z","last_seen":"2025-11-25T15:52:46.214577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"login.microsoftonline.com/consumers/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3A%3Aoutlook.office.com%3A%3AMBI_SSL%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Fattachment.outlook.live.net%2Fmail%2FoauthRedirect.html\u0026client-request-id=fdb26dbd-bd9d-7910-0216-b2e659ebaa84\u0026response_mode=fragment\u0026client_info=1\u0026prompt=none\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CaHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=4.26.0\u0026response_type=code\u0026code_challenge=1D-aX00SSPZHpMp6L_NkLSI0_BwtDHutib3swj-zSqI\u0026code_challenge_method=S256","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"ip":{"addr":"40.126.53.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stamp2.login.microsoftonline.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 29 Oct 2025 20:25:32 GMT","end":"Mon, 27 Apr 2026 20:25:32 GMT"},"fingerprint":{"sha1":"38:D7:C8:A9:CB:71:F9:82:0A:CE:A9:72:9E:AD:2D:71:7A:DC:8B:94","sha256":"46:42:B1:56:33:CC:4C:4F:C4:A5:36:C7:EA:0C:A9:59:BD:24:0C:A5:18:BC:0A:67:FA:78:EC:16:99:E7:D7:7A"}}},"request":{"raw":"GET /consumers/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3A%3Aoutlook.office.com%3A%3AMBI_SSL%20openid%20profile%20offline_access\u0026redirect_uri=https%3A%2F%2Fattachment.outlook.live.net%2Fmail%2FoauthRedirect.html\u0026client-request-id=fdb26dbd-bd9d-7910-0216-b2e659ebaa84\u0026response_mode=fragment\u0026client_info=1\u0026prompt=none\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7CaHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026x-client-SKU=msal.js.browser\u0026x-client-VER=4.26.0\u0026response_type=code\u0026code_challenge=1D-aX00SSPZHpMp6L_NkLSI0_BwtDHutib3swj-zSqI\u0026code_challenge_method=S256 HTTP/1.1\r\nHost: login.microsoftonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esctx-2MaX5bvGI8M=AQABCQEAAABlMNzVhAPUTrARzfQjWPtK5HfMo-HpB7SCYsXe_UcyJBkXRdn6yjQr1fqfgtzHUzwwCkwYPdIXaAL6zXVpOw0y4GFXGZtyCqpdNnsYiz_bPWkWJUo5vGbKFAOgoZBGRb_YMJAsfN1qrShu7-bz2HaqqbtfKV09z_ZX0XNqgy30rCAA; fpc=AhjCjUGAiX5Pnp-iLZaRDvs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-store, no-cache\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: -1\r\nlocation: https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\np3p: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nx-ms-request-id: 4ec00ecd-e47b-47c2-8714-853333d58400\r\nx-ms-ests-server: 2.1.22549.4 - SEC ProdSlices\r\nx-ms-clitelem: 1,0,0,,\r\nx-ms-srs: 1.P\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-7RXZyPx-AWeWMMdu7EV4xA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All\r\nx-xss-protection: 0\r\nset-cookie: esctx-LvfzOtICsyY=AQABCQEAAABlMNzVhAPUTrARzfQjWPtKEV0ebW6aJyorKTa6QBDX5Mbn93682T41Vanz8Q03EtwhCf9lZfjbTBVst1VBX-yos5AgaOuHDB-1jnQDrQHYkwf29WS_eSXWafTxhkuo1v-F1MwlZjehv34ZC8V6OQNqY6OlE6NhHv2ifrcLT34CPyAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nfpc=AhjCjUGAiX5Pnp-iLZaRDvs; expires=Thu, 25-Dec-2025 15:52:26 GMT; path=/; secure; HttpOnly; SameSite=None\nx-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\ncontent-length: 1045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4888,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/images/ms-logo-v2.jpg","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.231.128.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d#","date":"2025-11-25T15:52:27.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 24 Oct 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:B2:DA:54:D0:B6:60:FB:FF:3E:AC:5B:68:CB:51:1D:A8:DE:B7:EF","sha256":"5D:06:66:C2:CE:6B:2C:9F:59:F6:92:81:5F:0A:8E:C3:7A:D3:7A:C2:DE:80:F2:6D:AB:F2:A1:BC:B6:45:02:A3"}}},"request":{"raw":"GET /images/ms-logo-v2.jpg HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000\r\nContent-Type: image/jpeg\r\nLast-Modified: Mon, 17 Nov 2025 08:49:20 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0a859109f57dc1:0\"\r\nx-ms-request-id: e26065e2-616b-40ef-9c57-ac49012753cf\r\nPPServer: PPV: 30 H: BL02EPF0001D77B V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nDate: Tue, 25 Nov 2025 15:52:26 GMT\r\nContent-Length: 2797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 107x23, components 3","md5":"5ec86907c1ac5ef3e117723998feb8be","sha1":"5daa2fea5a34b0479a33698fc875f9f6c0581fd2","sha256":"bc2b16b51738b77d94ed7591ad1033fa804297ca9faaa35222aa65773f749164","sha512":"ac052ed698bc59b14694c6a47979d20819658620896831e9a538c33aa0083659f2926773ffc3082c9965736c7c6ef11daccba8dd3b3c427b535ee2b88ba435e5","ssdeep":"","tlshash":"9351fb4db6006c40d5f867f05fe2c6229e562090fb83b57ea4a5d009f4a11b39b1b1cf","first_seen":"2023-05-16T15:11:52Z","last_seen":"2026-06-03T02:29:40.327792Z","times_seen":492,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T15:52:14.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:EB:38:13:66:CB:54:3F:6C:62:35:F2:D3:3C:66:7D:ED:FA:20:6F","sha256":"39:35:BF:CC:EC:88:80:E3:C4:5B:DE:DF:90:CF:5D:28:7F:E6:38:0D:1A:BD:72:B6:D3:06:E3:F6:4F:CD:3A:A4"}}},"request":{"raw":"GET /mail/ HTTP/1.1\r\nHost: attachment.outlook.live.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nexpires: -1\r\nvary: Accept-Encoding\r\nrequest-id: 690144a1-92a7-dac7-a9cc-12d81047c7b8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-preferredroutingkeydiagnostics: 0\r\nx-calculatedfetarget: SV0P279CU001.internal.outlook.com\r\nset-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\nClientId=15570E7092874E6D9E5C6629ED4CCC6C; expires=Wed, 25 Nov 2026 15:52:14 GMT; path=/; secure; samesite=none\r\nx-calculatedbetarget: SV0P279MB1407.NORP279.PROD.OUTLOOK.COM\r\nx-backendhttpstatus: 200, 200\r\nx-web-server-version: 25.11.10.2\r\nx-clique: CLNORP279SVG01\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-9NOybh1fPBjWrLClxbr2Fw==' *.res.office365.com *.fluidpreview.office.net wss://*.delve.office.com:443 shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' acdn.adnxs.com cdn.adnxs.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com 'self' attachment.outlook.live.net *.adnxs.com api.taboola.com api.msn.com ris.api.iris.microsoft.com srtb.msn.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com login.live.com *.sharepoint.de login.live.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net attachment.outlook.live.net blob:; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' attachment.outlook.live.net *.adnxs.com *.engage.cloud.microsoft attachments.office.net attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy 'allow-duplicates'; report-uri https://csp.microsoft.com/report/OutlookWeb-Mail-PROD; upgrade-insecure-requests;\r\nx-app-name: Mail\r\nreferrer-policy: strict-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\norigin-trial: Apss6avQMrDIaTfgtZghJaQJ5VC/PhuSEosafJ3+aDW1VPwBTFN43bgy2UNZLHt2hChKB1jWn+sAk2g6a9Svaw0AAABteyJvcmlnaW4iOiJodHRwczovL2xpdmUuY29tOjQ0MyIsImZlYXR1cmUiOiJMb25nQW5pbWF0aW9uRnJhbWVUaW1pbmciLCJleHBpcnkiOjE3MTY5NDA3OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nlink: \u003chttps://res.public.onecdn.static.microsoft/\u003e; rel=\"preconnect\"\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-client-version: 20251114001.19\r\nx-besku: UNKNOWN\r\nx-rum-validated: 1\r\nx-rum-notupdatequeriedpath: 1\r\nx-rum-notupdatequerieddbcopy: 1\r\nx-proxy-routingcorrectness: 1\r\nx-proxy-backendserverstatus: 200\r\nx-bepartition: Clique/CLNORP279SVG01\r\nx-feefzinfo: OSL\r\nms-cv: oUQBaaeSx9qpzBLYEEfHuA.1.1\r\nalt-svc: \":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nx-firsthopcafeefz: OSL\r\nx-feproxyinfo: OS6P279CA0079.NORP279.PROD.OUTLOOK.COM\r\nx-powered-by: ASP.NET\r\nx-feserver: SV0P279CA0015, OS6P279CA0079\r\ndate: Tue, 25 Nov 2025 15:52:14 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13709,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (13709), with no line terminators","md5":"bc483d05b8c3cff921603973714a724b","sha1":"d826ad176ea84bc3a3dc48732a3d93be147d9a01","sha256":"6fc52c795f6944ecf454caa0cf406125c31eb2b35e044a1382b52dbd69154dbc","sha512":"b29df4da12d9ad96abf9180ec773bca175ae50b123a37a9d4cf4a4f3d2daf895906c22080b2c3c88387a93a15fc04d5e70998cfd17e7864dab9ecc299b124a7b","ssdeep":"192:H4YZZ4cBBLwOxdJHUFSvVikolCpr1TODBlbbnwNKx3PDtkt60:HVZ4sLwadJQs16DBhbfAt","tlshash":"7652fb511844903afb13e37671e6ff0d377ab187fc138a5ca29da2e808c1fd88a57652","first_seen":"2025-11-25T15:52:46.215639Z","last_seen":"2025-11-25T15:52:46.215639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.31586.m.b20432c6.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.31586.m.b20432c6.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 756152\r\nlast-modified: Wed, 19 Nov 2025 00:32:53 GMT\r\nx-ms-request-id: 865e65c2-801e-002d-1d09-594ce4000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955095,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4dd7\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=756152\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3026182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"2027957ab8af59360c9ed01d0493f7ed","sha1":"53b6f9589bac61f46006c4c732499211a35c5348","sha256":"5853dd72aa804cee9db99aac544ddb7ead245517b2e681c103729bfab30917e4","sha512":"641f1df432d851dbfb8f279379f6b71251d83b853db6b4647f5ef0c8ec37285b78835f19f59c5455b5df2202a36b825755808b4fa2558191a81affb6dc1363a9","ssdeep":"24576:gsVwoLw2ZH46BjXamNAIX92Gtye4xFFjH4+mzfYyWhqyU0snM3/zfZHzGIio0Vet:TaoLwsBjXamNAIX92Gtye4vFjH4+mzfc","tlshash":"c8256dd5b74170386397829ec17f4885e3393918a80d48b8f6b6d8dd24e8ac87277fb5","first_seen":"2025-11-20T20:22:27.749259Z","last_seen":"2025-12-05T00:46:59.84526Z","times_seen":51,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.77640.m.54967c08.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7108\r\nlast-modified: Fri, 14 Nov 2025 13:39:15 GMT\r\nx-ms-request-id: e941b701-201e-000b-6e02-5804fc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955134,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4dfe\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=7108\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20160), with no line terminators","md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2118\r\nlast-modified: Fri, 14 Nov 2025 13:39:16 GMT\r\nx-ms-request-id: 056f4c07-f01e-0008-7f02-58e598000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955152,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4e10\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=2118\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675), with no line terminators","md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attachment.outlook.live.net/mail/favicon.ico","fqdn":"attachment.outlook.live.net","domain":"live.net","tld":"net"},"ip":{"addr":"40.99.215.98","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert Cloud Services CA-1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:EB:38:13:66:CB:54:3F:6C:62:35:F2:D3:3C:66:7D:ED:FA:20:6F","sha256":"39:35:BF:CC:EC:88:80:E3:C4:5B:DE:DF:90:CF:5D:28:7F:E6:38:0D:1A:BD:72:B6:D3:06:E3:F6:4F:CD:3A:A4"}}},"request":{"raw":"GET /mail/favicon.ico HTTP/1.1\r\nHost: attachment.outlook.live.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ClientId=15570E7092874E6D9E5C6629ED4CCC6C; msal.cache.encryption=%7B%22id%22%3A%22019abbb7-3071-7778-a0b6-f5a4cf38878f%22%2C%22key%22%3A%22UgOxu8JPX1iAUnC2_0DuE_f3rJD_GCcxMyKVgVFLdpQ%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 9622\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 12 Nov 2025 02:29:57 GMT\r\naccept-ranges: bytes\r\netag: \"1dc537c3c7ae516\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-nanoproxy: 1,1\r\nrequest-id: 0a3f6b54-b930-0604-55db-f18154ed477b\r\nx-calculatedfetarget: SV0P279CU001.internal.outlook.com\r\nms-cv: VGs/CjC5BAZV2/GBVO1Hew.1.1\r\nx-besku: GEN6\r\nx-backendhttpstatus: 200,200\r\nx-feefzinfo: SVG\r\nx-calculatedbetarget: SVAP279MB0029.NORP279.PROD.OUTLOOK.COM\r\nx-feserver: OS6P279CA0079\r\nx-proxy-backendserverstatus: 200\r\nx-proxy-routingcorrectness: 1\r\nx-firsthopcafeefz: OSL\r\nalt-svc: h3=\":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=Cafe\u0026DestinationEndpoint=OSL\u0026RemoteIP=91.90.42.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=Default.mail\u0026MiraPartnerName=\"}],\"include_subdomains\":true}\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":9622,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"280295798011b759195663d1e11c8edf","sha1":"dd714f7b7fd1b9677f3c08f75dd63abaff77833a","sha256":"4296d6875e5fb2b893c6868244303c3c38d1423e85c41ab85dfc7e1834ea898c","sha512":"621799515fefd77f98e594515640600c28225cc6f3a77a4dcf76f2d092de79198a7aad9c0d64e833606788c66b37c303e73d5302d16edaadc48a70fc6d3e1196","ssdeep":"192:jvLkFKgO15THwibYwIt+PXU+BX/C8T61T18:jvL7nTQUYx+PXjFa8Oy","tlshash":"7f124bc57f08e856cd5a2631e133da08a5bc2fc48ed80a0dbd9974096673dc7193e6eb","first_seen":"2025-10-08T10:55:37.894154Z","last_seen":"2026-06-14T19:16:45.427228Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.231.128.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 24 Oct 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:B2:DA:54:D0:B6:60:FB:FF:3E:AC:5B:68:CB:51:1D:A8:DE:B7:EF","sha256":"5D:06:66:C2:CE:6B:2C:9F:59:F6:92:81:5F:0A:8E:C3:7A:D3:7A:C2:DE:80:F2:6D:AB:F2:A1:BC:B6:45:02:A3"}}},"request":{"raw":"GET /oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTU5YjItN2E1Ni04NWY5LTlmMGQ4ODdjNDUxZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8_bmxwPTA\u0026response_mode=fragment\u0026nonce=019abbb7-59b2-7de6-b08b-6d04563cd442\u0026prompt=none\u0026code_challenge=S5xjLdwGiMDe0nEvF9ejYz98UIUAOUvpz0pUyy5svNI\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=fdb26dbdbd9d79100216b2e659ebaa84\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=D8ZRfhmwp%2fuGLtHMS8ZGMs%2bURM1J1IvHKXW2vT8tJqM%3d5%3a1%3aCANARY%3aPI4JC6oyDfVlS9AFgKtuS8I5u0zBNG%2bWUQiGvxld7kk%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKTzjwXbViWYz3eDlQ7Y4dx8Znk5gn7ymbXny9s32vFfB9zqb1KFxPTIv-GotuNXJODIdfp5HiEdibET_oWVblBmoZrfl9ldIZzoOJkyH9vEPh7pAR842c6ibZBIJY4AyHYBJgj4EXe8qt4EQ1kcTBHB35-MjQhM_e4CDNJHb-6O4XszEGO_5DoOgCtK082i7LA64o36JBKbcLdjM9YOCzTCAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nx-ms-route-info: C522_SN1\r\nx-ms-request-id: f136d3ad-e414-40c1-a0c7-4db8b2f0e347\r\nPPServer: PPV: 30 H: SN1PEPF0004D8A4 V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nDate: Tue, 25 Nov 2025 15:52:26 GMT\r\nContent-Length: 2800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4888,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3202)","md5":"40d3f4ce8b41921b3f87e8a93f557b02","sha1":"77ca8d3009f016f89bb4d3d2546e52b22b29658e","sha256":"f2261143d113c280430c6c45c7596702aec45dc590f5a04ca29b8bc9bab4a8a4","sha512":"c56bca35d5b8dbeec1f9f434c10ea16168c007f6641fd6f7cb470c33decde394e8a227797b19653d4679cee2c6caa48d17cf5616e05c23f6b5405eaf5e4db176","ssdeep":"96:56+0IzBtj7WJnNChPFvNCaAqQGKOPGEApqE/cXOO0+czwTg:bjWmFlCoQGKOOPpf0u+Xg","tlshash":"99a1ea37ed9678029a11c5b0f1cb3708d1d95103a7028ee0f7d4939b59d698e929ef8c","first_seen":"2025-11-25T15:52:46.216374Z","last_seen":"2025-11-25T15:52:46.216374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.ddf3b781.css","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.AppBoot.m.ddf3b781.css HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 22685\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Nov 2025 13:39:14 GMT\r\nx-ms-request-id: ddd36f90-001e-0041-3102-58a773000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932520,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf5a8\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=22685\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134777,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65184), with no line terminators","md5":"9cf5c80c04e94a8ac0b29f0e6f97aace","sha1":"8b130e5371caf1041ed3e2a3cdd1ed6f7c95cc9a","sha256":"02f2ccd2eec49e1afaf1d5a772f4107ccf4ca7ef604ba47b0087ce05061c97eb","sha512":"b496d63b91a7976141b94a2e94643f6cdf8520f6c92dab52dda6e657563d92f5af41f8d87b401014b48233f9d204783a5fb551faa9d2bc0411638dce3ec7a3b1","ssdeep":"768:z7lGOVMKgyMKgxiwUxgFt6od9VUVVmLOE3dZt3KZAKB9uN9BY1cc3WVYUDNUUA41:tbSBhLGMOEZIqAutI6Dl","tlshash":"33d3b66b8530323c762bed2697cc576d9315f06799012bf6e856a224c7c3fe606b324e","first_seen":"2025-11-20T20:22:27.722839Z","last_seen":"2025-12-05T00:46:59.811812Z","times_seen":40,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":191,"dns":102,"connect":8,"send":0,"wait":11,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.77640.m.54967c08.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.77640.m.54967c08.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7108\r\nlast-modified: Fri, 14 Nov 2025 13:39:15 GMT\r\nx-ms-request-id: e941b701-201e-000b-6e02-5804fc000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652933657,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafa19\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=7108\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20160), with no line terminators","md5":"bb1f29603f1de4b68689c92494a2d655","sha1":"b04df873979361192cf473904f783304bf879bfa","sha256":"0ad37277c76af042777da4d02493a28d1cdbf6d32446e3694b89ef3379517d2a","sha512":"2697d6706d3f481eb4c3e8ca6f2b7497337924688fbf156875bc7f08bb11b927649e3bb8dc2d562e068f7d14df1ab23c355cac7e983b9db6a8bb33210c3d8232","ssdeep":"384:T/KYdUA9quTncPlL4xTIODG4KcTWUTUeH3TtLru7V5eAkacbJGFVLgueg0MtXdNf:xa0tFZHo42WMh1lz","tlshash":"5492d8c731c734eb63f604e9f06f014993ba58451d8e4814b219f8aa35a51b973a3f7d","first_seen":"2025-11-20T20:22:27.721734Z","last_seen":"2025-12-05T00:46:59.8023Z","times_seen":153,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/mail/pwa/v4/pngs/apple-touch-icon.png","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /assets/mail/pwa/v4/pngs/apple-touch-icon.png HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15472\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Oct 2025 15:48:51 GMT\r\nx-ms-request-id: e4a46629-c01e-003c-3a5e-3cd650000000\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652933816,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafab8\u0026TotalRTCDNTime=8\u0026CompressionType=\u0026FileSize=15472\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"86a05116c92778b3513ba7d9cdee5e21","sha1":"1c7a6c1e1ddeb854bb5f4da98f665fabf2d7af75","sha256":"703e207bb1f322fd288bc4d30f6c4ce2d5f88f2ed126bd98f8e5535b84c67aa3","sha512":"538537ec04113ea48c45e24d55b1da46f8542609c8622acc22de09bc67c10a4525251a79b1ca12728a46b52eaec72f67d5164268e897ed9872012f5686fcb642","ssdeep":"384:Yvvv5WCo1/m0uzWuaIPvKOSXsPCr7jcU/3TEQDZhI7knq5km6u:Yvvv5WCSuzWuzKTbr7wU/3TEWZaogf6u","tlshash":"6e62d1028899caecb0eed19d5630c1f1d5c21c9b498bbd8e7854a4e944bdece1b8c7c3","first_seen":"2025-10-15T07:27:42.583994Z","last_seen":"2026-06-14T19:16:45.408736Z","times_seen":690,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.live.com/oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d","fqdn":"login.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"20.231.128.66","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"login.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 24 Oct 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:B2:DA:54:D0:B6:60:FB:FF:3E:AC:5B:68:CB:51:1D:A8:DE:B7:EF","sha256":"5D:06:66:C2:CE:6B:2C:9F:59:F6:92:81:5F:0A:8E:C3:7A:D3:7A:C2:DE:80:F2:6D:AB:F2:A1:BC:B6:45:02:A3"}}},"request":{"raw":"GET /oauth20_authorize.srf?client_id=9199bf20-a13f-4107-85dc-02114787ef48\u0026scope=service%3a%3aoutlook.office.com%3a%3aMBI_SSL+openid+profile+offline_access\u0026redirect_uri=https%3a%2f%2fattachment.outlook.live.net%2fmail%2foauthRedirect.html\u0026response_type=code\u0026state=eyJpZCI6IjAxOWFiYmI3LTMwODYtNzBhMC05Njk0LWJkNGIyYjAxYmRlNyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19%7caHR0cHM6Ly9hdHRhY2htZW50Lm91dGxvb2subGl2ZS5uZXQvbWFpbC8\u0026response_mode=fragment\u0026nonce=019abbb7-3087-7c73-b44a-85635a50887a\u0026prompt=none\u0026code_challenge=2pw4jj9Z6U3pmiboj2dhzmvauAPYu8sxJHgNWcg2xGs\u0026code_challenge_method=S256\u0026x-client-SKU=msal.js.browser\u0026x-client-Ver=4.26.0\u0026uaid=df32f1b3bf8cff1e6ba470a543807c50\u0026msproxy=1\u0026issuer=mso\u0026tenant=consumers\u0026ui_locales=en-US\u0026client_info=1\u0026epctrc=ZIgPynI0Y4zOs7DnW%2boLJHGauZtIKazYwXAAE15Vpec%3d3%3a1%3aCANARY%3acpmpBqpxdEM2dF0DKWbaZWfC%2f0EMF9E7LHBbMrd6UbQ%3d\u0026epct=PAQABDgEAAABlMNzVhAPUTrARzfQjWPtKWfFZX0TGg-nKZF0xCGJzL9hDIqZAhHOuB8XF16MVKaMNp3KRLGrN_LzvCb1yfw4za9BJTxq-1Yw60tpgWu-Xf0PvucjqVls7ez46yrsJaoM2Qw36B-n6AmmXHU827v1ddMum6sGxcdV_3u8LZqHj0fktBXQTV0uQNaRhRZ-C11RYtru9MVCQFNXRuXhoF7mhGf5cZFkmWvOA_-QsbWRTyyAA\u0026jshs=0\u0026claims=%7b%22access_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d HTTP/1.1\r\nHost: login.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nx-ms-route-info: C538_SN1\r\nx-ms-request-id: 21a8bbae-d8fa-4ebe-a31c-25350525a3c4\r\nPPServer: PPV: 30 H: SN1PEPF0002F947 V: 0\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1; mode=block\r\nDate: Tue, 25 Nov 2025 15:52:15 GMT\r\nContent-Length: 2790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4878,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3202)","md5":"5f8ef23cd9246667cf4c827ee0c4d2e8","sha1":"58bb0ddc8d7d94a951d8d80d9f67cad95c471a1f","sha256":"1e0bae8e5eeaec8f73aec86e9eb49e1c861326cf1fc017dff545f209151542bd","sha512":"f876f22e8d7ad00d3dc41c155935f0f00371f068425e77c31e03a628882bba5a46c041375b4a35b243ff9fe9e3e8e689f583099e871afab42cbd8956efef1124","ssdeep":"96:x+0Iz2EtgELvRJnNChPFvNCaAqQGKOPGEApqE/cXOO0+czwTg:khDPmFlCoQGKOOPpf0u+Xg","tlshash":"4fa1fa37ed5668066611c1f0f1cb7308e1e9a103b6128ee0f7d853d659d198e925ff8c","first_seen":"2025-11-25T15:52:46.217202Z","last_seen":"2025-11-25T15:52:46.217202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":98,"dns":39,"connect":14,"send":0,"wait":141,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/assets/framework/microsoft.svg","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /assets/framework/microsoft.svg HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1405\r\nlast-modified: Wed, 30 Aug 2023 00:34:56 GMT\r\nx-ms-request-id: fd4b084c-801e-002d-1c6d-a24ce4000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955280,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4e90\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=1405\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: image/svg+xml\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d2b8f25545a2894e2721e9fe528e34c","sha1":"d0dae76f4bf5c04acd5fcdf1bcb12908099e328c","sha256":"797bda35d13e5130fe5a14e0069c31b46ec1af6ea47f2d300309803bb4d2608c","sha512":"fe1f84af0ba1100b2a90ee6fbfbd3763ef34d1a3bf045345538302ece7d37eaadc9a9cd0e09c2030e62b13a55e118a2417b27f14336c271758bfb3e256906385","ssdeep":"","tlshash":"bf612eaa4204cbae1987c29cdf3ae865170f05eaf2aa22d958ffc77120975c8dd46814","first_seen":"2023-10-02T23:14:06Z","last_seen":"2026-06-14T21:57:41.908411Z","times_seen":6974,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.71719.m.d9201d32.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2118\r\nlast-modified: Fri, 14 Nov 2025 13:39:16 GMT\r\nx-ms-request-id: 056f4c07-f01e-0008-7f02-58e598000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955660,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb500c\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=2118\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675), with no line terminators","md5":"0e310d85388f03dcbb216452f46f8541","sha1":"a1ebff004f73424edfab2b245e0fa1111869b0ba","sha256":"f0622602a3c2972ef026480281aa065a28b68d11c822022593aefbb39a3c091a","sha512":"1d5d7ef33792aaa9c22db33d6233d82b0c7a3d6603a6506441a1e7b32c7711928dcbc3084b9910ea278295457286adc682bf35b51425d007a43a32b5e93b60dc","ssdeep":"96:OV/Ug09slnwY3hfQvxWHUnYuax+16WFN78TuCS111dvFcuXuxMZG:W/UGjWimiUXhZ3XTG","tlshash":"01c198f5bb617016c79386ebea47051572646004a4bfcca4bb34acd73d90584a8a3bf7","first_seen":"2025-11-20T20:22:27.753288Z","last_seen":"2025-12-05T00:46:59.809623Z","times_seen":152,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026client-id=NO_AUTH\u0026client-version=1DS-Web-JS-4.3.6\u0026apikey=d634483c08244c1ca09af2b2d952c92e-ab2bba03-2ba3-49d8-a82c-ef6da750d8ab-7725\u0026upload-time=1764085946396\u0026time-delta-to-apply-millis=use-collector-delta\u0026w=0\u0026NoResponseBody=true","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.116.105","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:27.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 30 Sep 2025 16:41:46 GMT","end":"Sun, 29 Mar 2026 16:41:46 GMT"},"fingerprint":{"sha1":"20:01:C9:AF:88:2C:83:C8:1E:A9:D5:2E:BC:F8:7A:C4:AA:DD:2A:6F","sha256":"BE:25:59:75:94:BD:40:78:F9:44:8B:A3:21:7E:FF:98:22:C2:A0:E5:4E:96:06:90:DC:9B:9D:E7:57:C1:FA:EE"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026client-id=NO_AUTH\u0026client-version=1DS-Web-JS-4.3.6\u0026apikey=d634483c08244c1ca09af2b2d952c92e-ab2bba03-2ba3-49d8-a82c-ef6da750d8ab-7725\u0026upload-time=1764085946396\u0026time-delta-to-apply-millis=use-collector-delta\u0026w=0\u0026NoResponseBody=true HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6484\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6484,"data":"{\"name\":\"ssoSilent\",\"time\":\"2025-11-25T15:52:26.373Z\",\"ver\":\"4.0\",\"iKey\":\"o:d634483c08244c1ca09af2b2d952c92e\",\"ext\":{\"sdk\":{\"ver\":\"1DS-Web-JS-4.3.6\",\"seq\":1,\"epoch\":\"2250050743\"},\"app\":{\"sesId\":\"TgwtmrUzzfckG86hNHVKbd\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"attachment.outlook.live.net\",\"screenRes\":\"1280X1024\",\"userConsent\":false,\"consentDetails\":\"{\\\"GPC_DataSharingOptIn\\\":false}\"},\"intweb\":{},\"utc\":{\"popSample\":100},\"loc\":{\"tz\":\"+00:00\"},\"metadata\":{\"f\":{\"status\":{\"t\":6},\"startTimeMs\":{\"t\":6},\"visibilityChangeCount\":{\"t\":6},\"standardInteractionClientInitializeAuthorizationRequestCallCount\":{\"t\":6},\"initializeBaseRequestCallCount\":{\"t\":6},\"initializeBaseRequestDurationMs\":{\"t\":6},\"standardInteractionClientInitializeAuthorizationRequestDurationMs\":{\"t\":6},\"standardInteractionClientCreateAuthCodeClientCallCount\":{\"t\":6},\"standardInteractionClientGetClientConfigurationCallCount\":{\"t\":6},\"standardInteractionClientGetDiscoveredAuthorityCallCount\":{\"t\":6},\"authorityFactoryCreateDiscoveredInstanceCallCount\":{\"t\":6},\"authorityResolveEndpointsAsyncCallCount\":{\"t\":6},\"authorityUpdateCloudDiscoveryMetadataCallCount\":{\"t\":6},\"authorityUpdateCloudDiscoveryMetadataDurationMs\":{\"t\":6},\"authorityUpdateEndpointMetadataCallCount\":{\"t\":6},\"authorityUpdateEndpointMetadataDurationMs\":{\"t\":6},\"authorityResolveEndpointsAsyncDurationMs\":{\"t\":6},\"authorityFactoryCreateDiscoveredInstanceDurationMs\":{\"t\":6},\"standardInteractionClientGetDiscoveredAuthorityDurationMs\":{\"t\":6},\"standardInteractionClientGetClientConfigurationDurationMs\":{\"t\":6},\"standardInteractionClientCreateAuthCodeClientDurationMs\":{\"t\":6},\"silentIframeClientTokenHelperCallCount\":{\"t\":6},\"generatePkceCodesCallCount\":{\"t\":6},\"generateCodeVerifierCallCount\":{\"t\":6},\"getRandomValuesCallCount\":{\"t\":6},\"getRandomValuesDurationMs\":{\"t\":6},\"generateCodeVerifierDurationMs\":{\"t\":6},\"generateCodeChallengeFromVerifierCallCount\":{\"t\":6},\"sha256DigestCallCount\":{\"t\":6},\"sha256DigestDurationMs\":{\"t\":6},\"generateCodeChallengeFromVerifierDurationMs\":{\"t\":6},\"generatePkceCodesDurationMs\":{\"t\":6},\"getAuthCodeUrlCallCount\":{\"t\":6},\"getStandardParamsCallCount\":{\"t\":6},\"getStandardParamsDurationMs\":{\"t\":6},\"getAuthCodeUrlDurationMs\":{\"t\":6},\"silentHandlerInitiateAuthRequestCallCount\":{\"t\":6},\"silentHandlerLoadFrameSyncCallCount\":{\"t\":6},\"silentHandlerLoadFrameSyncDurationMs\":{\"t\":6},\"silentHandlerInitiateAuthRequestDurationMs\":{\"t\":6},\"silentHandlerMonitorIframeForHashCallCount\":{\"t\":6},\"removeHiddenIframeCallCount\":{\"t\":6},\"removeHiddenIframeDurationMs\":{\"t\":6},\"silentHandlerMonitorIframeForHashDurationMs\":{\"t\":6},\"silentIframeClientTokenHelperDurationMs\":{\"t\":6},\"durationMs\":{\"t\":6},\"queuedTimeMs\":{\"t\":6},\"queuedCount\":{\"t\":6},\"queuedManuallyCompletedCount\":{\"t\":6},\"incompleteSubsCount\":{\"t\":6}}}},\"data\":{\"baseData\":{\"properties\":{\"version\":\"PostChannel=4.3.6;SystemPropertiesCollector=4.3.6\"}},\"eventId\":\"019abbb7-3086-7d25-811b-fce607221b7a\",\"status\":2,\"authority\":\"https://login.microsoftonline.com/common/\",\"libraryName\":\"@azure/msal-browser\",\"libraryVersion\":\"4.26.0\",\"clientId\":\"9199bf20-a13f-4107-85dc-02114787ef48\",\"name\":\"ssoSilent\",\"startTimeMs\":1764085936262,\"appName\":\"OWA\",\"appVersion\":\"20251114001.19\",\"visibilityChangeCount\":0,\"standardInteractionClientInitializeAuthorizationRequestCallCount\":1,\"initializeBaseRequestCallCount\":1,\"initializeBaseRequestDurationMs\":0,\"standardInteractionClientInitializeAuthorizationRequestDurationMs\":1,\"standardInteractionClientCreateAuthCodeClientCallCount\":1,\"standardInteractionClientGetClientConfigurationCallCount\":1,\"standardInteractionClientGetDiscoveredAuthorityCallCount\":1,\"authorityFactoryCreateDiscoveredInstanceCallCount\":1,\"authorityResolveEndpointsAsyncCallCount\":1,\"authorityUpdateCloudDiscoveryMetadataCallCount\":1,\"authorityUpdateCloudDiscoveryMetadataDurationMs\":1,\"authorityUpdateEndpointMetadataCallCount\":1,\"authorityUpdateEndpointMetadataDurationMs\":0,\"cloudDiscoverySource\":\"hardcoded_values\",\"authorityEndpointSource\":\"hardcoded_values\",\"authorityResolveEndpointsAsyncDurationMs\":1,\"authorityFactoryCreateDiscoveredInstanceDurationMs\":3,\"standardInteractionClientGetDiscoveredAuthorityDurationMs\":3,\"standardInteractionClientGetClientConfigurationDurationMs\":3,\"standardInteractionClientCreateAuthCodeClientDurationMs\":3,\"silentIframeClientTokenHelperCallCount\":1,\"generatePkceCodesCallCount\":1,\"generateCodeVerifierCallCount\":1,\"getRandomValuesCallCount\":1,\"getRandomValuesDurationMs\":0,\"generateCodeVerifierDurationMs\":1,\"generateCodeChallengeFromVerifierCallCount\":1,\"sha256DigestCallCount\":1,\"sha256DigestDurationMs\":22,\"generateCodeChallengeFromVerifierDurationMs\":23,\"generatePkceCodesDurationMs\":24,\"getAuthCodeUrlCallCount\":1,\"getStandardParamsCallCount\":1,\"prompt\":\"none\",\"getStandardParamsDurationMs\":1,\"getAuthCodeUrlDurationMs\":1,\"silentHandlerInitiateAuthRequestCallCount\":1,\"silentHandlerLoadFrameSyncCallCount\":1,\"silentHandlerLoadFrameSyncDurationMs\":18,\"silentHandlerInitiateAuthRequestDurationMs\":19,\"silentHandlerMonitorIframeForHashCallCount\":1,\"removeHiddenIframeCallCount\":1,\"removeHiddenIframeDurationMs\":0,\"errorCode\":\"monitor_window_timeout\",\"silentHandlerMonitorIframeForHashDurationMs\":10001,\"silentIframeClientTokenHelperDurationMs\":10047,\"success\":false,\"startPageVisibility\":\"visible\",\"endPageVisibility\":\"visible\",\"durationMs\":10056,\"queuedTimeMs\":0,\"queuedCount\":17,\"queuedManuallyCompletedCount\":2,\"incompleteSubsCount\":0,\"context\":\"{\\\"SsoSlt\\\":{\\\"StdIntClientInitAuthReq\\\":{\\\"InitBaseReq\\\":{\\\"dur\\\":0},\\\"dur\\\":1},\\\"StdIntClientCreateAuthCodeClient\\\":{\\\"StdIntClientGetClientConf\\\":{\\\"StdIntClientGetDiscAuth\\\":{\\\"AuthFactCreateDiscInst\\\":{\\\"AuthResolveEndpointsAsync\\\":{\\\"AuthUpdCDMeta\\\":{\\\"dur\\\":1},\\\"AuthUpdEndpointMeta\\\":{\\\"dur\\\":0},\\\"dur\\\":1},\\\"dur\\\":3},\\\"dur\\\":3},\\\"dur\\\":3},\\\"dur\\\":3},\\\"SIClientTHelper\\\":{\\\"GenPkceCodes\\\":{\\\"GenCodeVerifier\\\":{\\\"GetRandomValues\\\":{\\\"dur\\\":0},\\\"dur\\\":1},\\\"GenCodeChallengeFromVerifier\\\":{\\\"Sha256Digest\\\":{\\\"dur\\\":22},\\\"dur\\\":23},\\\"dur\\\":24},\\\"GetAuthCodeUrl\\\":{\\\"getStandardParams\\\":{\\\"dur\\\":1},\\\"dur\\\":1},\\\"SHandlerInitAuthReq\\\":{\\\"SHandlerLoadFrameSync\\\":{\\\"dur\\\":18},\\\"dur\\\":19},\\\"SltHandlerMonitorIframeForHash\\\":{\\\"RemoveHiddenIframe\\\":{\\\"dur\\\":0},\\\"err\\\":\\\"monitor_window_timeout\\\",\\\"dur\\\":10001,\\\"fail\\\":1},\\\"dur\\\":10047,\\\"fail\\\":1},\\\"dur\\\":10056,\\\"fail\\\":1}}\",\"synthetic\":false,\"profileTelemetryIdV2\":\"019abbb7-306e-76b3-81b7-20f1309d325f\",\"sessionIdV2\":\"019abbb7-306e-702e-b2de-71222a94cd89\",\"correlationIdV2\":\"df32f1b3-bf8c-ff1e-6ba4-70a543807c50\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: MC1=GUID=aae869aa42274709ab67e321c7335291\u0026HASH=aae8\u0026LV=202511\u0026V=4\u0026LU=1764085947060; Domain=.microsoft.com; Expires=Wed, 25 Nov 2026 15:52:27 GMT; Path=/;Secure; SameSite=None\nMS0=89112e41116b4828ac9b3e91c6f651d8; Domain=.microsoft.com; Expires=Tue, 25 Nov 2025 16:22:27 GMT; Path=/;Secure; SameSite=None\r\ntime-delta-millis: 664\r\naccess-control-allow-headers: P3P,Set-Cookie,time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://attachment.outlook.live.net\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":49,"dns":0,"connect":18,"send":0,"wait":39,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 123190\r\nlast-modified: Fri, 21 Nov 2025 01:01:45 GMT\r\nx-ms-request-id: 59702b21-501e-0063-4389-5a626c000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652932462,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf56e\u0026TotalRTCDNTime=0\u0026CompressionType=br\u0026FileSize=123190\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92b6765015c5e7224cdef91cd0cd9a06","sha1":"be907e448116b5eee549ddbd76e83cd024c8fcdc","sha256":"e55e8171c4ed96cbfd0b6f92d1911923e10bcd883966f86f16eb1bd5c5221ba0","sha512":"af41b922a29705bc08dc4165ed64c15a3b9c1956dde52e9b1e86e89163a163911a071eb23933a079b571a7095512160f680cd115e5150ef4174db5d2eec5bf42","ssdeep":"3072:P4WHvprns33TOiig8e1ufZ63SAhe7C9dXnIL6LYUIWpZ:A+dngMHDf0iAk7CfXWfUI0Z","tlshash":"23248c5dbb1dd4dabea009e6af41a8fd6540b11f3c0e07812ccdd3b520dd97c2276a6a","first_seen":"2025-11-21T09:19:30.567025Z","last_seen":"2025-12-01T19:35:23.410494Z","times_seen":117,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":167,"dns":107,"connect":0,"send":0,"wait":3,"receive":19,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.faccbd8c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:15.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.AppBoot.m.faccbd8c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 578860\r\nlast-modified: Thu, 20 Nov 2025 20:12:08 GMT\r\nx-ms-request-id: e47fe78f-d01e-000f-1f63-5a89fb000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:15 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652932566,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085935.26eaf5d6\u0026TotalRTCDNTime=1\u0026CompressionType=br\u0026FileSize=578860\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2063716,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2be1cf237c07e9b10e0ca7553c5ca79e","sha1":"868d82c08d49d105254a4792a80046670b321e78","sha256":"544f5a6d4b72f19ff26a8a086ed2338b52e9a121b73e8ef1e111b3726a3abd9f","sha512":"8deb4ec75d3abb3456d134f0f8689cd39a7de23f3e1bf1dbbc89c17f5a0544d1cbb23559b5b7d1a15a5d31c53133153d9a694fafda4d88e9a7086554093fd315","ssdeep":"12288:1DRvVsOdPUOS5Cft3xVZ065vf1KyDScX2e1BuecOsPOIuzdv0Y5O9d:1DRvVsOdQ63xVy6z12eTuKsPLuzN0pd","tlshash":"93257de2314335ee97db85e9e01f048493f559181a4a0c78f174edeb24a4589b2f3fba","first_seen":"2025-11-20T20:22:27.767307Z","last_seen":"2025-12-04T22:39:15.33144Z","times_seen":28,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":210,"dns":105,"connect":8,"send":0,"wait":34,"receive":23,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/","date":"2025-11-25T15:52:16.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.94868.m.b71f002c.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 73103\r\nlast-modified: Tue, 11 Nov 2025 13:32:39 GMT\r\nx-ms-request-id: f9cee981-a01e-0058-4d02-5827c8000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:16 GMT\r\nakamai-request-bc: [a=23.36.76.167,b=652933644,c=g,n=NO__OSLO,o=20940]\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085936.26eafa0c\u0026TotalRTCDNTime=4\u0026CompressionType=br\u0026FileSize=73103\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab1aec4a9d1c13b7db8a162fc9eb7862","sha1":"882dab4ec2a12ddfcf84c04e14840b037a39c3eb","sha256":"108c404d7bc99eb8e2bcfc93a2f68be07ba62d7d3eb3cf565ca103af3f00d75a","sha512":"11fde43d416bc4dbaa738c903e248811b2d21b1410b67bd533cccaa0d18cbaf3fb030224a1b7231442601f6de414e60447a29bb7339bc8568ebf62ac75e89851","ssdeep":"6144:fd0VrQbjq6h0xFm3cISRmvMz+pQ1S4vW7UeEtY:10VKJ3c3WAq","tlshash":"1b640886739b7537a799122ef8655310b334a588945e003dfff879ca3c42842a3bbb75","first_seen":"2025-11-20T20:22:27.768671Z","last_seen":"2026-02-27T19:34:33.587195Z","times_seen":310,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js","fqdn":"res.public.onecdn.static.microsoft","domain":"static.microsoft","tld":"microsoft"},"ip":{"addr":"23.36.76.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attachment.outlook.live.net/mail/?nlp=0","date":"2025-11-25T15:52:26.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.onecdn.static.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 17 Sep 2025 21:40:31 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:45:BA:E6:B7:D9:94:44:39:64:FA:73:BC:88:D8:A2:78:96:BC:06","sha256":"1C:B4:F3:60:0B:78:CF:E1:E9:BF:CE:C3:56:F6:2B:EA:93:51:36:2C:C6:7A:8F:3E:DF:5C:9B:34:C2:F6:50:E3"}}},"request":{"raw":"GET /owamail/hashed-v1/scripts/owa.mail.runtime.0c76e962.js HTTP/1.1\r\nHost: res.public.onecdn.static.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://attachment.outlook.live.net/\r\nOrigin: https://attachment.outlook.live.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 123190\r\nlast-modified: Fri, 21 Nov 2025 01:01:45 GMT\r\nx-ms-request-id: 59702b21-501e-0063-4389-5a626c000000\r\ncontent-encoding: br\r\ncache-control: max-age=630720000\r\ndate: Tue, 25 Nov 2025 15:52:26 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.76.167,b=652955086,c=g,n=NO__OSLO,o=20940]\r\nquic-version: 0x00000001\r\nak-network: FF\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.a74c2417.1764085946.26eb4dce\u0026TotalRTCDNTime=8\u0026CompressionType=br\u0026FileSize=123190\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nserver-timing: clientrtt; dur=8, clienttt; dur=, origin; dur=0 , cdntime; dur=0\r\nakamai-cache-status: Hit from child\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92b6765015c5e7224cdef91cd0cd9a06","sha1":"be907e448116b5eee549ddbd76e83cd024c8fcdc","sha256":"e55e8171c4ed96cbfd0b6f92d1911923e10bcd883966f86f16eb1bd5c5221ba0","sha512":"af41b922a29705bc08dc4165ed64c15a3b9c1956dde52e9b1e86e89163a163911a071eb23933a079b571a7095512160f680cd115e5150ef4174db5d2eec5bf42","ssdeep":"3072:P4WHvprns33TOiig8e1ufZ63SAhe7C9dXnIL6LYUIWpZ:A+dngMHDf0iAk7CfXWfUI0Z","tlshash":"23248c5dbb1dd4dabea009e6af41a8fd6540b11f3c0e07812ccdd3b520dd97c2276a6a","first_seen":"2025-11-21T09:19:30.567025Z","last_seen":"2025-12-01T19:35:23.410494Z","times_seen":117,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}