GET support.microsoft.com/js/Support.Main.min.js?v=ahX0ESGHKMdSX6piAwXqYY0T7Ot8VGVg6ny7am_oVeM
200 OK 58 kB URL GET support.microsoft.com/js/Support.Main.min.js?v=ahX0ESGHKMdSX6piAwXqYY0T7Ot8VGVg6ny7am_oVeM
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (57868)
Hash f0e8aa6ad608380dd97ab05efa962cb0
3005914377afbf6d9e24a013fe4fb7ca89be14c0
6a15f411218728c7525faa620305ea618d13eceb7c546560ea7cbb6a6fe855e3
GET /js/Support.Main.min.js?v=ahX0ESGHKMdSX6piAwXqYY0T7Ot8VGVg6ny7am_oVeM HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd740093686bf"
last-modified: Sat, 07 Jun 2025 00:06:37 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG5LHG2CG5:000000C9
x-operationid: 78b7651565fcd0473ad8952f1b663b88
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvp
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
200 OK 3.7 kB URL GET support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (3637)
Hash a249b03b72ab5e7b60e7806457b9be61
ff0b5f4fb91a9dbf147262ad59b292c6c2dfe122
48ff8c6449bef199f206c7a1c49403e10dc6341a9d4a1f8946b042dde66e315f
GET /js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd741b8277e6a"
last-modified: Sat, 07 Jun 2025 00:18:40 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDGARBHC0F8:00000024
x-operationid: 9c3ce55eff566ad662757d51d7bdf211
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvu
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/js/Article.Main.min.js?v=7PbQ36aVJvddmi7ForZP4pfrz5gu5ODt57QcdW1w-SQ
200 OK 17 kB URL GET support.microsoft.com/js/Article.Main.min.js?v=7PbQ36aVJvddmi7ForZP4pfrz5gu5ODt57QcdW1w-SQ
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (17107)
Hash 07827b27b3f4db244de01a929ba626b4
49f79217f392c438d420eae6ed77aeaef25a5967
ecf6d0dfa69526f75d9a2ec5a2b64fe297ebcf982ee4e0ede7b41c756d70f924
GET /js/Article.Main.min.js?v=7PbQ36aVJvddmi7ForZP4pfrz5gu5ODt57QcdW1w-SQ HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd739316ed600"
last-modified: Fri, 06 Jun 2025 23:17:38 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHVME8SJ3I:00000082
x-operationid: 3c7a16a6b2161783e1464d86a50f1700
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvv
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_dBDzSGL0r6DH8cE7bpP0Zg2.js
200 OK 150 kB URL GET aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_dBDzSGL0r6DH8cE7bpP0Zg2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0
Certificate IssuerMicrosoft Corporation
Subjectidnaakamaicdn.msftauth.net
FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC
ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File type JavaScript source, ASCII text, with very long lines (52854)
Size 150 kB (150466 bytes)
Hash 7410f34862f4afa0c7f1c13b6e93f466
1c947fdf463bf660b85cf17bc1624db7173964ed
a207c607bf8bf2be939e8bf05f3f1b8ba137550def0d67388913ad9c3c193510
GET /shared/1.0/content/js/FetchSessions_Core_dBDzSGL0r6DH8cE7bpP0Zg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 52123
content-type: application/x-javascript
content-encoding: gzip
content-md5: ZjokhoIZuKbwntK79d+AmQ==
last-modified: Wed, 26 Mar 2025 20:12:20 GMT
accept-ranges: bytes
etag: "0x8DD6CA2836C63FF"
x-ms-request-id: 5b4aed84-101e-00d2-055d-a149c2000000
x-ms-version: 2018-03-28
access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version
access-control-allow-origin: *
cache-control: public, max-age=24171116
date: Mon, 23 Jun 2025 16:04:13 GMT
vary: Accept-Encoding
akamai-grn: 0.f54d2417.1750694653.1bb150ce
X-Firefox-Spdy: h2
OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://support.microsoft.com/
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://support.microsoft.com
date: Mon, 23 Jun 2025 16:04:15 GMT
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/kxFy-clip.png
200 OK 542 B URL GET viruswarning0623us05a.z13.web.core.windows.net/kxFy-clip.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 66 x 68, 8-bit colormap, non-interlaced
Hash 0e9558d2d6e8000ce5c6c749c8fc67c2
f7ba9490807ef70bb6195150d6287cd54b7fefd0
91fb42a68a122344fd78cfd5f0cf9d06ff6d307fd4a5c68f40231c5950ece9a1
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /kxFy-clip.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 542
Content-Type: image/png
Content-MD5: DpVY0tboAAzlxsdJyPxnwg==
Last-Modified: Mon, 23 Jun 2025 13:01:08 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605767FB2"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 74c4eb57-f01e-003d-2358-e4ba4e000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET support.microsoft.com/css/landingpage/landing-page.min.css?v=W2w2xpcHDp9vVmZnsdhkA8Yd4fmQM8NGRquWmBj-phg
200 OK 118 kB URL GET support.microsoft.com/css/landingpage/landing-page.min.css?v=W2w2xpcHDp9vVmZnsdhkA8Yd4fmQM8NGRquWmBj-phg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Unicode text, UTF-8 text, with very long lines (64027)
Size 118 kB (117778 bytes)
Hash 78c8958af667e3178e48d6d182e3ff68
4da5bfe9661a9a49c188bbd1acae6bf87a294f9d
82e8c86ba2033b91ccdf1582e86869d799eea0d5ec37e01978460e7e3aa7ecd4
GET /css/landingpage/landing-page.min.css?v=W2w2xpcHDp9vVmZnsdhkA8Yd4fmQM8NGRquWmBj-phg HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd7414cdc5212"
last-modified: Sat, 07 Jun 2025 00:15:40 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9I0F2TQO:00000045
x-operationid: 68d10c99194c22cee53b7c8fe5ae51d9
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqva
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/nOxp-sett.png
200 OK 463 B URL GET viruswarning0623us05a.z13.web.core.windows.net/nOxp-sett.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 33 x 31, 8-bit colormap, non-interlaced
Hash 905d91c276116928fa306ea732723fa9
092604f6a8786e46a7dee06065d29d2896fcf568
9cffd13c2ce05ebe032709a88fa59504e1218a12b175ec40d5aab280c18be51e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /nOxp-sett.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 463
Content-Type: image/png
Content-MD5: kF2RwnYRaSj6MG6nMnI/qQ==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605C2E6BE"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 09090a8a-c01e-00a0-2c58-e448f4000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.woff2
404 The requested content does not exist. 321 B URL GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (321), with no line terminators
Hash 44f7c73e268181629372524fada0539d
69f643a0a06eebb070e9001ea03becbce700e05c
567a77f6a534019fd98d4013c1c16a050f7af24c15e264bfc168128e77f93024
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/font-awesome.min.css
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653; sticky_lb_sess_id=zd7rzpiwdy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 The requested content does not exist.
Content-Length: 321
Content-Type: text/html
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-error-code: WebContentNotFound
x-ms-request-id: 7116db0c-701e-0051-5758-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:13 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/_Fm7-alert.mp3
206 Partial Content 201 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/_Fm7-alert.mp3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type Audio file with ID3 version 2.3.0, contains:
- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
Size 201 kB (200832 bytes)
Hash 0116152611dd51432e852781f8cc7e82
2408d3d281b25649894f78a4e19f7f8a8ac735f9
fc59bbb18f923747b9cd3f3b23537ff09c5ad2fdfc1505a4800a3f269a234e65
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /_Fm7-alert.mp3 HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Content-Length: 200832
Content-Type: audio/mpeg
Content-Range: bytes 0-200831/200832
Last-Modified: Mon, 23 Jun 2025 13:01:03 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256025E69C0"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b8989757-801e-008e-0b58-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/63-57d110/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/3d-28500e/ae-f1ac0c?ver=2.0&_cf=02242021_3231
200 OK 172 kB URL GET www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/63-57d110/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/3d-28500e/ae-f1ac0c?ver=2.0&_cf=02242021_3231
IP
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectwww.microsoft.com
FingerprintC0:CF:0C:15:80:E2:06:18:EA:15:35:7F:C1:02:86:22:51:8D:DC:4D
ValidityMon, 26 Aug 2024 16:01:06 GMT - Thu, 21 Aug 2025 16:01:06 GMT
File type Unicode text, UTF-8 text, with very long lines (64241)
Size 172 kB (171736 bytes)
Hash b90787aa04a7c068ef8b36d9eab94206
898dc13da8fa31b93a1f4ad35c3fe51584db4410
cbea01b657a36ba3b1f87a27bd51a17c7c11c80e542cac0d8c82d14733e8f25f
GET /onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/63-57d110/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/3d-28500e/ae-f1ac0c?ver=2.0&_cf=02242021_3231 HTTP/1.1
Host: www.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
last-modified: Mon, 05 May 2025 18:40:48 GMT
x-activity-id: 2d90ea95-6d74-47f2-8cb4-270d84a3a8eb
x-appversion: 1.0.9090.33347
x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastus, dt: 2018-05-03T20:14:23.4188992Z, bt: 2024-11-21T03:31:34.0000000Z}
ms-operation-id: c42d257e066bdd0319e403bac806d62c
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
x-s1: 2025-05-05T18:40:48
x-s2: 2025-05-05T18:40:48
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
x-azure-ref: 20250505T220320Z-16668f9c644f296fhC1STOn3n80000000bk0000000009xf6
accept-ranges: bytes
content-encoding: gzip
content-length: 22788
cache-control: public, max-age=27311742
expires: Tue, 05 May 2026 18:39:54 GMT
date: Mon, 23 Jun 2025 16:04:12 GMT
vary: Accept-Encoding
tls_version: tls1.3
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: CASMicrosoftCV244b8dbe.0
ms-cv-esi: CASMicrosoftCV244b8dbe.0
x-rtag: RT
X-Firefox-Spdy: h2
GET www.hitsteps.com/responsive/cleanzone/js/bootstrap/dist/fonts/glyphicons-halflings-regular.woff
200 OK 23 kB URL GET www.hitsteps.com/responsive/cleanzone/js/bootstrap/dist/fonts/glyphicons-halflings-regular.woff
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjecthitsteps.com
Fingerprint32:6E:3B:A2:7A:16:A3:52:B8:7B:8E:85:8B:75:24:7C:80:D1:2A:92
ValidityWed, 11 Jun 2025 06:10:04 GMT - Tue, 09 Sep 2025 06:58:42 GMT
File type Web Open Font Format, TrueType, length 23320, version 1.0
Hash 68ed1dac06bf0409c18ae7bc62889170
22037a3455914e5662fa51a596677bdb329e2c5c
fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e
GET /responsive/cleanzone/js/bootstrap/dist/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: www.hitsteps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://viruswarning0623us05a.z13.web.core.windows.net
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: font/woff
content-length: 23320
cf-ray: 954538559dfcb4f3-OSL
last-modified: Sun, 21 Jun 2020 12:28:43 GMT
etag: "5b18-5a897444d54c0"
accept-ranges: bytes
access-control-allow-origin: *
vary: User-Agent, Accept-Encoding
cache-control: max-age=259200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W4nc%2FP6tK9Tm2slqd8Lf01HGKBuVw3LcxBWcTlV41IQtKXHV7mR0Mp%2Fq6JHuC%2FyglGq%2FpCn%2FSSIPvTzHZqJL%2B5FeZdQcD6O2Hbd3P68xV8eb4xFeJxRrPPRboZEE4l%2F0GOVw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=611&min_rtt=447&rtt_var=357&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3251&recv_bytes=1349&delivery_rate=6895238&cwnd=253&unsent_bytes=0&cid=8c6dabad1f4d0cd1&ts=144&x=0"
X-Firefox-Spdy: h2
OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://support.microsoft.com/
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://support.microsoft.com
date: Mon, 23 Jun 2025 16:04:14 GMT
X-Firefox-Spdy: h2
GET support.microsoft.com/en-us/silentsigninhandler
200 OK 0 B URL GET support.microsoft.com/en-us/silentsigninhandler
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en-us/silentsigninhandler HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; ai_session=Z1fyvNsyI9ihqFo0V1neZV|1750694653767|1750694653767; MC1=GUID=922d8692a6214a5487ee974835cbc95e&HASH=922d&LV=202506&V=4&LU=1750694654960; MS0=a1122cdd22ae4cefb917770cb85b8ae4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:15 GMT
content-type: text/html; charset=utf-8
cache-control: no-store,no-cache
pragma: no-cache
set-cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; max-age=31536000; path=/; secure; samesite=none
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9I0F3B0V:00000003
x-operationid: bfeaa95d1272d9489e173233a5b08cec
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-azure-ref: 20250623T160415Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqyr
x-cache: CONFIG_NOCACHE
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/styles.css
200 OK 9.0 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/styles.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type assembler source, ASCII text, with very long lines (1266)
Hash 6ef2560453a7b6bff8ea7ec4265a9816
1ed7044a0579bb751b10ba7353a36e9d208c659e
a072681ff11d60e33eb625e1d75e828542f80c9362d905c3eb9626063e27b4cc
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /styles.css HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 8998
Content-Type: text/css
Content-MD5: bvJWBFOntr/46n7EJlqYFg==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256061B5A04"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b898969b-801e-008e-6d58-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/bg1.jpg
200 OK 550 B URL GET viruswarning0623us05a.z13.web.core.windows.net/bg1.jpg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (404)
Hash 69659e71aeb6127e6ef0dfe864d5ecd5
3cf318479957b4fc4f0fdf6af070a15d7dbd25ee
7d9ab165076915bc3854bab91e080fe05da9ccd8c9ae9058a3f1cf5fb09134c9
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /bg1.jpg HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 550
Content-Type: image/jpeg
Content-MD5: aWWeca62En5u8N/oZNXs1Q==
Last-Modified: Mon, 23 Jun 2025 13:01:03 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25602B3821B"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b8989730-801e-008e-6758-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/cross.png
200 OK 386 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/cross.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
Size 386 kB (386359 bytes)
Hash be42ad7752720327d28bf52dbdbb64c2
f4cce31b9236319aa9c87fee038638d1de12c07d
c3ad6aa1c03fd108854f008cfec2753ba623e1470a4d61798b5d8c050e474868
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /cross.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 386359
Content-Type: image/png
Content-MD5: vkKtd1JyAyfSi/Utvbtkwg==
Last-Modified: Mon, 23 Jun 2025 13:01:05 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256037C59D5"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d5b0-701e-0051-6d58-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
200 OK 22 kB URL GET support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash c49c34ee38f103bcb82f58ded32f57db
757c8ce6d92102903f636c20b70e414a5e9a2e20
bdbbda3bd97031ff5bcb76b427d2ecd9c4617922c3860f662e51fb18ac5cc591
GET /js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd7414d76605f"
last-modified: Sat, 07 Jun 2025 00:15:41 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9HVU0M25:00000136
x-operationid: ed0348c9bff0126f7441e166ae45b64f
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvs
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/normal/latest.woff2
200 OK 34 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/normal/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
Hash 36397a3bc139c6e9f81d383f060f080a
3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
GET /css/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: font/woff2
content-length: 34052
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd738c58ca984"
last-modified: Fri, 06 Jun 2025 23:14:37 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCC72GD3:00000083
x-operationid: 64849e8ee47b27aa67c93fc4a851e2a2
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqw8
x-fd-int-roxy-purgeid: 0
x-cache-info: L2_T1
x-cache: TCP_REMOTE_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET support.microsoft.com/images/en-us/4d906340-1078-47be-99b0-c245fb66840d
200 OK 349 kB URL GET support.microsoft.com/images/en-us/4d906340-1078-47be-99b0-c245fb66840d
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 288x288, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.3 (Windows), datetime=2024:02:17 10:56:03], baseline, precision 8, 2185x1385, components 3
Size 349 kB (348778 bytes)
Hash 622aa5ed875082c460281748711abace
4cc18f586b9c08eeef360ca5071ecf245c8b7947
bc56340b6642491a6928d7fbf5877ff1bc112877a0e2fbd2934e81052a031210
GET /images/en-us/4d906340-1078-47be-99b0-c245fb66840d HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: image/jpeg
content-length: 348778
cache-control: max-age=3600, proxy-revalidate, stale-while-revalidate=30
etag: "0x8DCA777FC2DEEB9"
expires: Thu, 19 Jun 2025 15:42:14 GMT
last-modified: Thu, 18 Jul 2024 22:21:35 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HND5B39HS3CN:00000015
x-operationid: baa563f6803e18d64aeed8e165e270a5
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-ms-request-id: c0ec07f2-001e-0055-3f06-428e97000000
x-ms-version: 2020-04-08
x-ms-creation-time: Thu, 18 Jul 2024 22:21:35 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
x-ms-server-encrypted: true
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqws
x-fd-int-roxy-purgeid: 0
x-cache-info: L1_T2
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET edgecdnplus.com/gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.23449714233320051
200 OK 53 B URL GET edgecdnplus.com/gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.23449714233320051
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectedgecdnplus.com
FingerprintC1:B2:F0:81:C9:57:71:AE:F8:EF:B3:B5:37:E5:D4:CF:D1:CA:47:3E
ValidityFri, 09 May 2025 06:51:35 GMT - Thu, 07 Aug 2025 07:49:46 GMT
File type GIF image data, version 89a, 1 x 1
Hash 1e455f64a9b6578428e50186fcc9c092
0638ab5398ee2ff45e02a70115e04d60c62536c7
172992127164f053a1bfc5b3e59ad28a1630aa6169be03b89a1f0046c9aaf3cb
GET /gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.23449714233320051 HTTP/1.1
Host: edgecdnplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: image/gif
server: cloudflare
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CAO PSA OUR"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Mon, 23 Jun 2025 16:04:14 GMT
access-control-allow-origin: *
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2F53lxBN0CO4vZjlWptGxeK5NootunoGGznP4k4D4hfVHmnq%2FfLs0zw0GeQbMJ9F5JfSGmPfKPdNT6p74BBmBW1RmD7qZ33i0XU51UNo%3D"}]}
set-cookie: PHPSESSID=b470v86hnk0m2gkmc733djeit2; SameSite=None; Secure; Path=/
cf-ray: 95453852df0456ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-153548451-1
200 OK 289 kB URL GET www.googletagmanager.com/gtag/js?id=UA-153548451-1
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 289 kB (288869 bytes)
Hash c89bcb884fd6a8fc38a5f9105e9d3c98
cf3c8b297f87679aaee8b70f8bdd4b4a5ad17e80
713016a09bd82309bc8f91ea71b9a1daa23ac60f4fc3e3137347eccf60213155
GET /gtag/js?id=UA-153548451-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 16:04:11 GMT
expires: Mon, 23 Jun 2025 16:04:11 GMT
cache-control: private, max-age=900
last-modified: Mon, 23 Jun 2025 15:42:43 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 101789
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET support.microsoft.com/css/Article/article.css?v=0L89BVeP4I_vlf3G71MrPYAXM1CtRPw6ZcJwIduUvCA
200 OK 131 kB URL GET support.microsoft.com/css/Article/article.css?v=0L89BVeP4I_vlf3G71MrPYAXM1CtRPw6ZcJwIduUvCA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Size 131 kB (131023 bytes)
Hash 6bd7dba7eba422e0ad2d0a0f175279a8
c152d2ad7c537d8f85e51b92c32da4b7df8bb871
7c09ec79994d02f7ffe87e908d2044e400a04b03593cb82493e9309d852c02e3
GET /css/Article/article.css?v=0L89BVeP4I_vlf3G71MrPYAXM1CtRPw6ZcJwIduUvCA HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd740777ad8cf"
last-modified: Sat, 07 Jun 2025 00:09:42 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG6USDFG0K:0000002B
x-operationid: 1a1c42ef6d2618c96144a5023680b1d2
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqv9
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
200 OK 558 B URL GET support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (503)
Hash a3bc5418f2834309ce2918b15f3b8eea
62ba2712c6d4960f1057e103f6e1f3c95f2c701b
b2b62643a7c4fe4a4e12934ad819f0293cc00181b78d8091affff3617ceb96b1
GET /js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
content-length: 558
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd737eb6503ae"
last-modified: Fri, 06 Jun 2025 23:08:31 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHRORQ1G93:000000B8
x-operationid: 84cbc47d0f322dc8b4a0ffb0fc714e3e
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvt
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn-js.xyz/onlinefloat?sid=112665&comply=1&id=90930&lang=auto&juid=zd7rzpiwdy
200 OK 6.8 kB URL GET cdn-js.xyz/onlinefloat?sid=112665&comply=1&id=90930&lang=auto&juid=zd7rzpiwdy
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectcdn-js.xyz
FingerprintA3:42:5E:AC:D3:64:5A:86:9F:EE:DD:C2:57:F2:63:29:37:45:25:76
ValidityFri, 13 Jun 2025 13:49:08 GMT - Thu, 11 Sep 2025 14:46:13 GMT
File type JavaScript source, ASCII text, with very long lines (2219), with CRLF line terminators
Hash 73625a8e7d4f6d869c8176f3fb51dfd3
424cdf323350e49c55e1403a495b8ce44ba4484b
9c2b1594ef6fe36de82ed5f1cee59774488183c460859e47f0dd5cbca6737442
GET /onlinefloat?sid=112665&comply=1&id=90930&lang=auto&juid=zd7rzpiwdy HTTP/1.1
Host: cdn-js.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPSESSID=an311u9fkn262c7b5r6qsls0mu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: text/javascript;charset=UTF-8
content-length: 2056
server: cloudflare
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CAO PSA OUR"
last-modified: Mon, 23 Jun 2025 16:04:13 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=H08tYQHwbKbmgRP75O4YqjKS4J%2FYCX9EgwiBga7fd2kvGqlS6CRg99wfiPIMOwnrYhBZKYM6ooIjPC4ZpVRUHmo5SOUnj%2BFM"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9545384d7f59569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET support.microsoft.com/css/supportbridge/support-bridge.css?v=ft5yipT-SPVc4yMl4wK9PnMTXqhVUrUJZoPQVrYDjUI
200 OK 1.9 kB URL GET support.microsoft.com/css/supportbridge/support-bridge.css?v=ft5yipT-SPVc4yMl4wK9PnMTXqhVUrUJZoPQVrYDjUI
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (1877), with no line terminators
Hash dcd61ee564f0aaa6f4304f2b12fa08b9
114bb27fb0b7127541b5db9f33ed2cc1ea42c101
7ede728a94fe48f55ce32325e302bd3e73135ea85552b5096683d056b6038d42
GET /css/supportbridge/support-bridge.css?v=ft5yipT-SPVc4yMl4wK9PnMTXqhVUrUJZoPQVrYDjUI HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd738c3c26e55"
last-modified: Fri, 06 Jun 2025 23:14:34 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCA721TB:00000007
x-operationid: 4a6901a4f3fe5765cf565e43fb23bb4c
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqw5
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/en-us/authentication/silentsignin?ru=%2Fen-us%2Fsilentsigninhandler
302 Found 24 kB URL GET support.microsoft.com/en-us/authentication/silentsignin?ru=%2Fen-us%2Fsilentsigninhandler
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en-us/authentication/silentsignin?ru=%2Fen-us%2Fsilentsigninhandler HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 23 Jun 2025 16:04:13 GMT
content-length: 0
cache-control: no-store,no-cache
location: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0
pragma: no-cache
set-cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8PcF6suhxfBOr-8H8rlqYAqsuBmJ_DXnAB87LRo0IBvLOL9I2OygPHbjZjYMzYymzLMetyGf2jLJlK9pxyvUbPQmqYN2flVZ_V-VGe-_xCrGQ6CJBPuV-6AOiYDE2eKBXU7GSAFq7VEouX3LSNmwt7rl-YD9_z8zJjjAsLB4BsPTcLQ-KjcUO14el8uAFvM8gr5QoRJ7F3ZvoPw-hCwH17RL6nMMIn7RGna_AwfPBR5JeoUHkma9IY-DWY1vNiPIQUgYDGnjCzHJGgWZBvXvxvE=N; expires=Mon, 23 Jun 2025 16:19:13 GMT; path=/signin-oidc; secure; samesite=none; httponly
.AspNetCore.Correlation.rWecnxxfSf_-PHFXNeN_4QRTQuDuOGeFfowuwEhesmE=N; expires=Mon, 23 Jun 2025 16:19:13 GMT; path=/signin-oidc; secure; samesite=none; httponly
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9I0F3B0V:00000002
x-operationid: 406876604ad49a9eb67a08f0082cc701
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqwe
x-cache: CONFIG_NOCACHE
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/normal/latest.woff2
200 OK 34 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/normal/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
Hash 36397a3bc139c6e9f81d383f060f080a
3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
GET /css/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; ai_session=Z1fyvNsyI9ihqFo0V1neZV|1750694653767|1750694653767
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: font/woff2
content-length: 34052
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd738c58ca984"
last-modified: Fri, 06 Jun 2025 23:14:37 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCC72GD3:00000083
x-operationid: 64849e8ee47b27aa67c93fc4a851e2a2
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160414Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqx7
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
200 OK 22 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Hash d4ff90db5da894c833f356f47a16e408
30606044507d81b996c992895ab16b8a8d68be97
f2c761ee3ce27469f940a05b64e38a829a400427727cd0bdbb4e36f1d572afd7
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653; sticky_lb_sess_id=zd7rzpiwdy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 21716
Content-Type: application/octet-stream
Content-MD5: 1P+Q212olMgz81b0ehbkCA==
Last-Modified: Mon, 23 Jun 2025 13:01:03 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256025B5CF7"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b89898e9-801e-008e-3358-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:12 GMT
GET support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_71.woff2
200 OK 30 kB URL GET support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_71.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 30032, version 0.0
Hash be43045e5c1119db2b2c2c38342a9216
5028764dab0defcea18691b1edf769e924d5ab55
f2ad20da85abf7ad48afbfe14e5e60a7ac5e648c0afaecab8751981644154cf3
GET /css/fonts/support-icons/mdl2/latest_v4_71.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: font/woff2
content-length: 30032
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd7414d7641d0"
last-modified: Sat, 07 Jun 2025 00:15:41 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9HVU20N6:000000ED
x-operationid: fa5249484f782f2fe7404e0512b4af2e
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqwa
x-fd-int-roxy-purgeid: 0
x-cache: TCP_REMOTE_HIT
x-cache-info: L1_T2
accept-ranges: bytes
X-Firefox-Spdy: h2
GET login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=3dad6e94-7479-4a06-f7c1-6c467bce1919&partnerId=smcconvergence&idpflag=proxy
200 OK 4.1 kB URL GET login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=3dad6e94-7479-4a06-f7c1-6c467bce1919&partnerId=smcconvergence&idpflag=proxy
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectstamp2.login.microsoftonline.com
Fingerprint8C:66:91:AB:FB:11:0C:48:23:F3:9F:5C:3C:70:93:14:CC:29:1B:A3
ValidityFri, 23 May 2025 05:26:40 GMT - Wed, 19 Nov 2025 05:26:40 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash ff85183539381c806712ca1437d28776
76ccfb3b38bfefcd5fefa678775215d40d7f00fc
249149c91b2749da287222dfc246bec9f261ab9f970cfee5ba786248ce93c967
GET /savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=3dad6e94-7479-4a06-f7c1-6c467bce1919&partnerId=smcconvergence&idpflag=proxy HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Cookie: buid=1.AUsAMe_N-B6jSkuT5F9XHpElWhkrJ-4RRD9DjyhcE8tv1AcBAABLAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEdQY7FZIuol42h1E7HyPQCqh1QtPYABDWW23rXRv_cRMB_e-7RvXOgH1JWeI0gx0zjJMFKltfy34HpSOYbdldY7SoMF_1OB58PMQCaAw1ke8gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEN76liQsGgSEsMyOI1JhNc39OSzwsBc9cIuBlew5ldoD7RrJz0WjKtWQi_cVX5CwrGJANh6JBE6ncKgzMPFG8QKXazSNVVTsdMWWiiUDLksvKFK_B5vlc1JHC6kMrf-ydv3sXQboobhw65rE82eM4jlbaoJ47hnLXBG_jvIGdl7YgAA; esctx-uuwn5T9Uwzk=AQABCQEAAABVrSpeuWamRam2jAF1XRQE3UE_ruUzdiX1bYgNARDqkOWpcWYeUUQy23gA6rMSbe5qnCWQx11l93B79MOgG--QFCmCWSclMqdJlWsDfD132gr_yKOsPs7D5hwH8atRKBcw0QwdlruhieYOLiN3dMxh0ZfziIQYYO9RNFgspMyY5SAA; fpc=AklsnrKQdplLjdNrIBv6zfdqwEtIAQAAAP1x698OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: a90fee15-5db2-4b62-afb1-231e978d7300
x-ms-ests-server: 2.1.20899.10 - FRC ProdSlices
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-KpKKisSavn-7CZIqeIdKWg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All
x-xss-protection: 0
set-cookie: fpc=AklsnrKQdplLjdNrIBv6zfdqwEtIAQAAAP1x698OAAAA; expires=Wed, 23-Jul-2025 16:04:14 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
date: Mon, 23 Jun 2025 16:04:13 GMT
content-length: 1312
X-Firefox-Spdy: h2
POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 154 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash 501611d750d53c3aaea015de9515541e
c045737bd1a61752c454d0ba8deea5a19092861d
252d06ff6e77c2942005a6e48fae757b2ad57ca89155427d0eec9e87e1d6cf58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.18
apikey: b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888
upload-time: 1750694655776
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 25555
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Cookie: MC1=GUID=922d8692a6214a5487ee974835cbc95e&HASH=922d&LV=202506&V=4&LU=1750694654960; MS0=a1122cdd22ae4cefb917770cb85b8ae4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
HTTP/2 200 OK
content-length: 154
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 200
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://support.microsoft.com
access-control-expose-headers: time-delta-millis
date: Mon, 23 Jun 2025 16:04:15 GMT
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/-EBq-current.png
200 OK 1.2 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/-EBq-current.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 27 x 28, 8-bit colormap, non-interlaced
Hash 35629cc2adc804353a548305f1217206
cda6e89c5f6a644683aea6999a5d11e00dc64275
c1d52e31f7fc13cbb3efca8b0ec937ddd97a5ec545c4dad26193429db10d8662
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /-EBq-current.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1162
Content-Type: image/png
Content-MD5: NWKcwq3IBDU6VIMF8SFyBg==
Last-Modified: Mon, 23 Jun 2025 13:01:04 GMT
Accept-Ranges: bytes
ETag: "0x8DDB2560308E884"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2c667e76-201e-003e-4e58-e45b2a000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET www.googletagmanager.com/gtag/js?id=G-8ZDVYQ6PNR&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104766473~104766475~104791498~104791500
200 OK 338 kB URL GET www.googletagmanager.com/gtag/js?id=G-8ZDVYQ6PNR&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104766473~104766475~104791498~104791500
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 338 kB (338268 bytes)
Hash d23d1f11a63306cc1faa3e7ac53ea54d
e8318cb5ac3396dea07816b6536baaff0edac3b5
095ce76f9bada094917880e436bd7e58ad952df264b12a7fabb35a9e59b61523
GET /gtag/js?id=G-8ZDVYQ6PNR&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104766473~104766475~104791498~104791500 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 16:04:12 GMT
expires: Mon, 23 Jun 2025 16:04:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 119010
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0
200 OK 24 kB URL GET login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectstamp2.login.microsoftonline.com
Fingerprint8C:66:91:AB:FB:11:0C:48:23:F3:9F:5C:3C:70:93:14:CC:29:1B:A3
ValidityFri, 23 May 2025 05:26:40 GMT - Wed, 19 Nov 2025 05:26:40 GMT
File type HTML document, ASCII text, with very long lines (9842), with CRLF, LF line terminators
Hash 99e3985218d9d1cbbd0f35d6956bd3dd
f7e1c61e5038f36fe6b2742265a3e5eb6b589de0
c78e953e411397e3cd1fbe5508c78fee7fca0e3dac874949ef710f265c303b57
GET /common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.microsoft.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
x-dns-prefetch-control: on
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: a5052075-72fa-46d4-959a-d2b3e4016600
x-ms-ests-server: 2.1.20899.10 - SEC ProdSlices
x-ms-clitelem: 1,0,0,,
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-19OkenokI8XxyOt23rImhw' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All
x-xss-protection: 0
set-cookie: buid=1.AUsAMe_N-B6jSkuT5F9XHpElWhkrJ-4RRD9DjyhcE8tv1AcBAABLAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEdQY7FZIuol42h1E7HyPQCqh1QtPYABDWW23rXRv_cRMB_e-7RvXOgH1JWeI0gx0zjJMFKltfy34HpSOYbdldY7SoMF_1OB58PMQCaAw1ke8gAA; expires=Wed, 23-Jul-2025 16:04:13 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEN76liQsGgSEsMyOI1JhNc39OSzwsBc9cIuBlew5ldoD7RrJz0WjKtWQi_cVX5CwrGJANh6JBE6ncKgzMPFG8QKXazSNVVTsdMWWiiUDLksvKFK_B5vlc1JHC6kMrf-ydv3sXQboobhw65rE82eM4jlbaoJ47hnLXBG_jvIGdl7YgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-uuwn5T9Uwzk=AQABCQEAAABVrSpeuWamRam2jAF1XRQE3UE_ruUzdiX1bYgNARDqkOWpcWYeUUQy23gA6rMSbe5qnCWQx11l93B79MOgG--QFCmCWSclMqdJlWsDfD132gr_yKOsPs7D5hwH8atRKBcw0QwdlruhieYOLiN3dMxh0ZfziIQYYO9RNFgspMyY5SAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AklsnrKQdplLjdNrIBv6zfdqwEtIAQAAAP1x698OAAAA; expires=Wed, 23-Jul-2025 16:04:13 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
date: Mon, 23 Jun 2025 16:04:13 GMT
content-length: 10475
X-Firefox-Spdy: h2
GET mem.gfx.ms/scripts/me/MeControl/10.25136.1/en-US/meBoot.min.js
200 OK 287 kB URL GET mem.gfx.ms/scripts/me/MeControl/10.25136.1/en-US/meBoot.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintC5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41
ValiditySun, 25 May 2025 11:28:42 GMT - Fri, 21 Nov 2025 11:28:42 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (62736), with no line terminators
Size 287 kB (287002 bytes)
Hash ea91a5f38a512e73a7a4f5f770e245f6
59abc26585dcf2b336c16cbc3ca54dee28213ed8
ba36c077f43a212f6539fd9ee370aa3b4ba9c1c28ebb91179c2fcff206815361
GET /scripts/me/MeControl/10.25136.1/en-US/meBoot.min.js HTTP/1.1
Host: mem.gfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 22 May 2025 13:06:30 GMT
etag: W/"1dbcb5501c2061a"
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 20250623T160413Z-17dfff746845fvlnhC1SVG713g0000000eqg00000000871p
x-fd-int-roxy-purgeid: 38334287
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET login.live.com/Me.htm?v=3
200 OK 3.4 kB URL GET login.live.com/Me.htm?v=3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638862914533384465.MGY4NmNhYTYtZDE2ZS00OWIyLWI1NDMtYWMzMjI5YTBiNTZhN2Y0NjA2MWUtMGIzNi00YTBjLTgxMzktNmI3ZDQ2NjAwMDM3&prompt=none&nopa=2&state=CfDJ8PcF6suhxfBOr-8H8rlqYAoXYXKCsCLL9do_Z09sBMS6_TjjpVqJLoyL5VKVBHWo9OZI6BlT53Fe1FtYLJhIfTHdki-MY_hIMcDZPnyd3Wb84BTCEy2-JCvDgDR3L9FWzpPtafp3cXLxiA29xXo1MnJlITipRno0awkNROT9trkDWVe84kmwu4drsJJwxGVEBIfws-7E6iqgB9F1uIzBdbTcmLImGp7OI9EXjBmNtbL48xvmA3cLa9Ujph49gNSqatGhaJLP04w6UtRFQrocyfljGhpvmVewcCJLPT2NUb_0f7jKZhR6GNma2SgT1T18PwOQCDy2o2l0mwn4Xci4X1YknWz_uDsXKiGFko_QylB-&x-client-SKU=ID_NET6_0&x-client-ver=8.3.0.0
Certificate IssuerDigiCert Inc
Subjectlogin.live.com
Fingerprint74:DA:ED:3A:99:18:8A:7A:7D:A6:CE:FC:6A:15:14:CE:F7:1F:40:E2
ValidityFri, 30 May 2025 00:00:00 GMT - Sun, 30 Nov 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3445), with CRLF line terminators
Hash acdec8dad3164fba20e86d50f1b979f1
0c5fd1cca5becdb0080d20e6a90ccd91bc0d5894
1d2cde2e778a731cbd158758f735e1bcc2508a8252720d261d94068aff45aacc
GET /Me.htm?v=3 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=315360000
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Thu, 21 Jun 2035 16:04:14 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C555_SN1
x-ms-request-id: 50b69779-6e93-4efd-a492-0836b9b5bbd2
PPServer: PPV: 30 H: SN1PEPF0002FA46 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=a17e3ada27ee4a43887fe422604ca01e; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=N<=1750694654&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Mon, 23 Jun 2025 16:04:13 GMT
Content-Length: 1393
OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://support.microsoft.com/
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://support.microsoft.com
date: Mon, 23 Jun 2025 16:04:15 GMT
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/
200 OK 25 kB URL User Request GET viruswarning0623us05a.z13.web.core.windows.net/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (704)
Hash 8a7575447222989fe521998efb1ca3a9
d21c5351b18301a831d14a429d9e12528b585e8a
45c9569dcc53537d2e98a0fc85bdd20c7e05844dfb53351a8c2e07e117a9a5c8
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET / HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 24762
Content-Type: text/html
Content-MD5: inV1RHIimJ/lIZmO+xyjqQ==
Last-Modified: Mon, 23 Jun 2025 13:01:06 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25604030227"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b89895c2-801e-008e-4b58-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:10 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/minimize.jpg
200 OK 17 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/minimize.jpg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
Hash 4bf52eb9b3efce840add1a90d83a40e5
6348a7617dfce3165e07af53a48df7892d62ffe1
a85f1e749a829c5c909837844c6b53ce0a9ae2adb7c8eac0e7b96c372c679a0d
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /minimize.jpg HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 17173
Content-Type: image/jpeg
Content-MD5: S/UuubPvzoQK3RqQ2DpA5Q==
Last-Modified: Mon, 23 Jun 2025 13:01:08 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605B6657F"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b8989700-801e-008e-3958-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/jquery.min.js
200 OK 85 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/jquery.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type JavaScript source, ASCII text, with very long lines (32478)
Hash 20c129bedb4a26db02fc0f54d026c3f5
093b9d2728788de24a728742070a348b2848573f
436ecc90fab5ed1034b68a4a0e924e0132d93d9e7fb59b4fe23018eb7d9242c1
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /jquery.min.js HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 84817
Content-Type: text/javascript
Content-MD5: IMEpvttKJtsC/A9U0CbD9Q==
Last-Modified: Mon, 23 Jun 2025 13:01:06 GMT
Accept-Ranges: bytes
ETag: "0x8DDB2560422E18A"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2c667de6-201e-003e-5e58-e45b2a000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET support.microsoft.com/en-us/windows
200 OK 137 kB URL GET support.microsoft.com/en-us/windows
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type HTML document, ASCII text, with very long lines (1478), with CRLF, LF line terminators
Size 137 kB (137365 bytes)
Hash eca497e22d70f96b60dc0938c5079284
5d6c71f04fe41e091083ac59ffd67d97e7833458
e00fa7a8d34b05736bb2d7bbd6af9671edef881c88e89517c9a3d0c4e5154497
GET /en-us/windows HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/html; charset=utf-8
cache-control: no-store,no-cache
pragma: no-cache
set-cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; max-age=31536000; path=/; secure; samesite=none
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCC72VCT:00000002
x-operationid: 291c273af600d46a8dfeddb1c43febca
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aquv
x-cache: CONFIG_NOCACHE
X-Firefox-Spdy: h2
GET support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
200 OK 2.2 kB URL GET support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (2230), with no line terminators
Hash 4d56af8acf934242a6d0c2d5fd5785e1
9d58373c57c53221c4762b87bdc186f6e38384d0
6f26f0cc605a8c789c557b2956ce78d147d5d2cc16d2f09b3a606306bca3f4de
GET /css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd737eb650936"
last-modified: Fri, 06 Jun 2025 23:08:31 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHRORQ3AF4:00000050
x-operationid: 8ef29dff70476bf198a00aa626273376
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvb
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
200 OK 138 kB URL GET support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (42133)
Size 138 kB (138067 bytes)
Hash b9c3e4320db870036919f1ee117bda6e
29b5a9066b5b1f1fe5afe7ee986e80a49e86606a
a1fe019388875b696edb373b51a51c0a8e3bad52cd489617d042c0722bdb1e48
GET /lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd737eb671ad3"
last-modified: Fri, 06 Jun 2025 23:08:31 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHRORQ1GIP:000000B3
x-operationid: 769113ce667ac117ece1455b48bddfd2
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvk
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/semibold/latest.woff2
200 OK 29 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/semibold/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 29388, version 0.0
Hash 6e75a94d5f7170a1ab532d32c2a35755
9c1b6fff544089941bbeddbcf529c3f0b46d853a
d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f
GET /css/fonts/segoe-ui/west-european/semibold/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; ai_session=Z1fyvNsyI9ihqFo0V1neZV|1750694653767|1750694653767
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: font/woff2
content-length: 29388
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd737eb65734c"
last-modified: Fri, 06 Jun 2025 23:08:31 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHRORQ30R3:00000129
x-operationid: 9f74070217016d8e5f7610b1aea6fdb7
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160414Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqx8
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET mem.gfx.ms/scripts/me/MeControl/10.25136.1/en-US/meCore.min.js
200 OK 101 kB URL GET mem.gfx.ms/scripts/me/MeControl/10.25136.1/en-US/meCore.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintC5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41
ValiditySun, 25 May 2025 11:28:42 GMT - Fri, 21 Nov 2025 11:28:42 GMT
File type JavaScript source, ASCII text, with very long lines (34235), with CRLF, LF line terminators
Size 101 kB (100769 bytes)
Hash 6fe3dd83a0d98bc1977f57ea33c37693
8df606f40e4cc8c07ce929d5a82fd5304eaf4eb7
a5268a183f2a091d2d17773997e89a25fc45cbd60e586edf61f544fb85d6f6a8
GET /scripts/me/MeControl/10.25136.1/en-US/meCore.min.js HTTP/1.1
Host: mem.gfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 22 May 2025 13:06:34 GMT
etag: W/"1dbcb55042948a1"
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 20250623T160414Z-17dfff746845fvlnhC1SVG713g0000000eqg00000000873e
x-fd-int-roxy-purgeid: 38334287
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
POST support.microsoft.com/signin-oidc
302 Found 0 B URL POST support.microsoft.com/signin-oidc
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /signin-oidc HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 477
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8PcF6suhxfBOr-8H8rlqYAqsuBmJ_DXnAB87LRo0IBvLOL9I2OygPHbjZjYMzYymzLMetyGf2jLJlK9pxyvUbPQmqYN2flVZ_V-VGe-_xCrGQ6CJBPuV-6AOiYDE2eKBXU7GSAFq7VEouX3LSNmwt7rl-YD9_z8zJjjAsLB4BsPTcLQ-KjcUO14el8uAFvM8gr5QoRJ7F3ZvoPw-hCwH17RL6nMMIn7RGna_AwfPBR5JeoUHkma9IY-DWY1vNiPIQUgYDGnjCzHJGgWZBvXvxvE=N; .AspNetCore.Correlation.rWecnxxfSf_-PHFXNeN_4QRTQuDuOGeFfowuwEhesmE=N; EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; ai_session=Z1fyvNsyI9ihqFo0V1neZV|1750694653767|1750694653767
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 23 Jun 2025 16:04:15 GMT
content-length: 0
location: /en-us/silentsigninhandler
set-cookie: .AspNetCore.Correlation.rWecnxxfSf_-PHFXNeN_4QRTQuDuOGeFfowuwEhesmE=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/signin-oidc; secure; samesite=none; httponly
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCC72VCT:00000003
x-operationid: 01d95ecd6cfecf776f5736a91b3c5f7f
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160415Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqyp
x-cache: CONFIG_NOCACHE
X-Firefox-Spdy: h2
GET mem.gfx.ms/me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com
200 OK 0 B URL GET mem.gfx.ms/me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintC5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41
ValiditySun, 25 May 2025 11:28:42 GMT - Fri, 21 Nov 2025 11:28:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com HTTP/1.1
Host: mem.gfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:15 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: public, no-transform, max-age=43200
expires: Mon, 23 Jun 2025 21:05:38 GMT
x-content-type-options: nosniff
content-security-policy: frame-ancestors https://support.microsoft.com;
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 20250623T160415Z-17dfff74684r47xvhC1SVGm2uw0000000bv0000000001rk8
x-fd-int-roxy-purgeid: 38334287
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/scripts.js
200 OK 464 B URL GET viruswarning0623us05a.z13.web.core.windows.net/scripts.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type JavaScript source, ASCII text
Hash 2856b9008b89d67be19d586e43ae8521
d47ac3f1328fb58b19584d77d2e3acc93663fb10
19e9aaa12f8478366b3707ff49b0e3cfc4818f9343b48f5d43890c943d1b1a3d
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /scripts.js HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 464
Content-Type: text/javascript
Content-MD5: KFa5AIuJ1nvhnVhuQ66FIQ==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605E3143B"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d502-701e-0051-5b58-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/speech.mp3
206 Partial Content 550 B URL GET viruswarning0623us05a.z13.web.core.windows.net/speech.mp3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (404)
Hash 69659e71aeb6127e6ef0dfe864d5ecd5
3cf318479957b4fc4f0fdf6af070a15d7dbd25ee
7d9ab165076915bc3854bab91e080fe05da9ccd8c9ae9058a3f1cf5fb09134c9
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /speech.mp3 HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Content-Length: 550
Content-Type: audio/mpeg
Content-Range: bytes 0-549/550
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25606075FB5"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 09090a59-c01e-00a0-8058-e448f4000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
200 OK 31 kB URL GET mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintC5:7D:B9:BE:C9:07:E9:E4:9F:87:EF:27:83:99:2A:06:7C:5B:4E:41
ValiditySun, 25 May 2025 11:28:42 GMT - Fri, 21 Nov 2025 11:28:42 GMT
File type JavaScript source, ASCII text, with very long lines (30789)
Hash 55c7ea0608e5dc010f1d78198aa2fd19
afa723b03e9a966b091fb1b88cdb8c0be722f517
ad7813cba9dc726bd281bc9e85e50071c4dfb79e9415500b6ddc5c59a0de0eb9
GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1
Host: mem.gfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, no-transform, max-age=43200
expires: Mon, 23 Jun 2025 12:25:30 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 20250623T160412Z-17dfff74684r47xvhC1SVGm2uw0000000bv0000000001red
x-fd-int-roxy-purgeid: 38334287
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/support-icons/fluent/latest_v2_11.woff2
200 OK 37 kB URL GET support.microsoft.com/css/fonts/support-icons/fluent/latest_v2_11.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 36888, version 0.0
Hash 9b0d118df2786766f3f2adbde755ecef
6256a445cd294ef0edfa22d410ae40e45355bb3c
f610165947cb23bf323daa9848f04657202fa468d32d9d3b0c5b6d6ef43852cd
GET /css/fonts/support-icons/fluent/latest_v2_11.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: font/woff2
content-length: 36888
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd738c3c2f918"
last-modified: Fri, 06 Jun 2025 23:14:34 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCA726IF:000000BF
x-operationid: 11102c9405047f25996a8c18189c1a43
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqwb
x-fd-int-roxy-purgeid: 0
x-cache-info: L2_T1
x-cache: TCP_REMOTE_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET support.microsoft.com/images/en-us/82ffd042-9c3d-41ff-b7f4-56bfb0d0f94d
200 OK 38 kB URL GET support.microsoft.com/images/en-us/82ffd042-9c3d-41ff-b7f4-56bfb0d0f94d
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
Hash 3662e8423dbf93ecbb554a07f3e99eb3
f3b749d5d61f5924942fa6c8debc82459461cd1f
56e33bdb5b225ff31a5ca86d04b08d483d60d7078c2254818dd7ff96cc7933e3
GET /images/en-us/82ffd042-9c3d-41ff-b7f4-56bfb0d0f94d HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: image/jpeg
content-length: 37493
cache-control: max-age=3600, proxy-revalidate, stale-while-revalidate=30
etag: "0x8DC187880401E6C"
expires: Thu, 19 Jun 2025 14:28:32 GMT
last-modified: Thu, 18 Jan 2024 22:55:00 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDCTSF97ONC:00000013
x-operationid: 0fb193cb9f86e99d1647acf3f3162d66
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-ms-request-id: 0d750899-c01e-00e9-3fb4-7399e6000000
x-ms-version: 2020-04-08
x-ms-creation-time: Thu, 18 Jan 2024 22:55:00 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
x-ms-server-encrypted: true
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqwt
x-fd-int-roxy-purgeid: 0
x-cache-info: L1_T2
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/light/latest.woff2
200 OK 27 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/light/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 27168, version 0.0
Hash b7640425501065524cec27d4a55a85ed
f254c388a65efb4b271c56deb5685a77ebe09d9d
fe8a1047376498c80a157d13555e42a92ad480fcb0bcc9de51ad1930fbeb7f91
GET /css/fonts/segoe-ui/west-european/light/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa; ai_session=Z1fyvNsyI9ihqFo0V1neZV|1750694653767|1750694653767
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:14 GMT
content-type: font/woff2
content-length: 27168
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd739316eff20"
last-modified: Fri, 06 Jun 2025 23:17:38 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHVME8SM9O:00000051
x-operationid: 5182f0ac43f839f4c8360969dfacda94
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160414Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqx6
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/font-awesome.min.css
200 OK 27 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/font-awesome.min.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type ASCII text, with very long lines (27265)
Hash 906bc7effea07d2028803a9940820f9d
e7d11ca368322532b6abb14e8ffba8008b0fe5d0
3bce4bee45f4e80b28b5ca29fe1fdc86f9728e9d21c7c92f202acb25395556c3
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /font-awesome.min.css HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 27428
Content-Type: text/css
Content-MD5: kGvH7/6gfSAogDqZQIIPnQ==
Last-Modified: Mon, 23 Jun 2025 13:01:04 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25603548C5C"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b89896c5-801e-008e-0c58-e41ae3000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/Z5BR-network.png
200 OK 607 B URL GET viruswarning0623us05a.z13.web.core.windows.net/Z5BR-network.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 63 x 70, 8-bit colormap, non-interlaced
Hash 2cd03a547f00cad010f9038619df45de
912f919836a77a514c76b990aceaf5e930a24024
c56a8ae4818963e0d71eda4ebf46b4f2cdd3a238537dc8e99711fb690d272a73
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Z5BR-network.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 607
Content-Type: image/png
Content-MD5: LNA6VH8AytAQ+QOGGd9F3g==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256063101B1"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 719ef71d-601e-003f-5158-e404f6000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/bootstrap.min.js
200 OK 60 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/bootstrap.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type JavaScript source, ASCII text, with very long lines (59765)
Hash 02d223393e00c273efdcb1ade8f4f8b1
0cc93b8421d89c24a889642428b363cb831de78a
79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /bootstrap.min.js HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 60044
Content-Type: text/javascript
Content-MD5: AtIjOT4AwnPv3LGt6PT4sQ==
Last-Modified: Mon, 23 Jun 2025 13:01:04 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25603232368"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 090909d8-c01e-00a0-1358-e448f4000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/_Fm7-alert.mp3
206 Partial Content 201 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/_Fm7-alert.mp3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type Audio file with ID3 version 2.3.0, contains:
- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
Size 201 kB (200832 bytes)
Hash 0116152611dd51432e852781f8cc7e82
2408d3d281b25649894f78a4e19f7f8a8ac735f9
fc59bbb18f923747b9cd3f3b23537ff09c5ad2fdfc1505a4800a3f269a234e65
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /_Fm7-alert.mp3 HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Content-Length: 200832
Content-Type: audio/mpeg
Content-Range: bytes 0-200831/200832
Last-Modified: Mon, 23 Jun 2025 13:01:03 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256025E69C0"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d772-701e-0051-3358-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:12 GMT
GET www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
200 OK 26 kB URL GET www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
IP
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectwww.microsoft.com
FingerprintC0:CF:0C:15:80:E2:06:18:EA:15:35:7F:C1:02:86:22:51:8D:DC:4D
ValidityMon, 26 Aug 2024 16:01:06 GMT - Thu, 21 Aug 2025 16:01:06 GMT
File type Web Open Font Format, TrueType, length 26288, version 0.0
Hash d0263dc03be4c393a90bda733c57d6db
8a032b6deab53a33234c735133b48518f8643b92
22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12
GET /mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff HTTP/1.1
Host: www.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://www.microsoft.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/font-woff
content-length: 26288
last-modified: Thu, 13 Mar 2025 03:57:54 GMT
x-activity-id: 83e2cf78-0568-48e6-88fc-ab8356b57d65
x-appversion: 1.0.9090.33347
x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2024-11-21T03:31:34.0000000Z}
ms-operation-id: b821fe062184baf33b50facc7225974f
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
x-azure-ref: 20250313T035754Z-15b95477c68fbrdjhC1STOq60400000006g0000000003ags
accept-ranges: bytes
cache-control: public, max-age=22679658
expires: Fri, 13 Mar 2026 03:58:31 GMT
date: Mon, 23 Jun 2025 16:04:13 GMT
tls_version: tls1.3
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: CASMicrosoftCV3d9704d8.0
ms-cv-esi: CASMicrosoftCV3d9704d8.0
x-rtag: RT
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/s-S4-acc.png
200 OK 813 B URL GET viruswarning0623us05a.z13.web.core.windows.net/s-S4-acc.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 77 x 72, 8-bit colormap, non-interlaced
Hash d648c1837d01495eccd63e053491f72a
991d8f6c72777239472410d6129fd5f25ed9d134
9edbf56b360080f5d6765dce77353b8130e9f8316ad34c68f6c2792cdc446321
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /s-S4-acc.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 813
Content-Type: image/png
Content-MD5: 1kjBg30BSV7M1j4FNJH3Kg==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB256061A48B4"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d575-701e-0051-3d58-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET ipwho.is/?lang=en
200 OK 669 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoGetSSL
Subjectipwho.is
Fingerprint23:45:4F:91:B0:11:6E:44:AE:44:5A:2A:A3:B7:9E:11:6A:17:40:9D
ValidityMon, 03 Mar 2025 00:00:00 GMT - Tue, 03 Mar 2026 23:59:59 GMT
Hash 6b4b75ee34ef155724824e4f4525541f
e5ca766050bb0d483b49067ed7d0a9f3d36f8a1e
2a45ee89cc5bda7da13316afed831a7dd1047409b7515dba48a34298b9af8297
GET /?lang=en HTTP/1.1
Host: ipwho.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://viruswarning0623us05a.z13.web.core.windows.net
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Jun 2025 16:04:12 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: ipwhois
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
X-Robots-Tag: noindex
GET cdn-js.xyz/code?code=b87f11b7fa78164d3bd076839592aa4f
200 OK 46 kB URL GET cdn-js.xyz/code?code=b87f11b7fa78164d3bd076839592aa4f
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectcdn-js.xyz
FingerprintA3:42:5E:AC:D3:64:5A:86:9F:EE:DD:C2:57:F2:63:29:37:45:25:76
ValidityFri, 13 Jun 2025 13:49:08 GMT - Thu, 11 Sep 2025 14:46:13 GMT
File type ASCII text, with very long lines (44567), with CRLF line terminators
Hash 7e906d8978b90838910864289f26c54e
4f1c64b8391a5a87b7a5f080df0ced936b8c61f6
cce5643ac12604b0912ab3bae22ba1be2491e385f9fdec8c200224ca60137e94
GET /code?code=b87f11b7fa78164d3bd076839592aa4f HTTP/1.1
Host: cdn-js.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/javascript;charset=UTF-8
content-length: 10980
server: cloudflare
p3p: CP="CAO PSA OUR"
expires: Tue, 03 Jul 2001 06:00:00 GMT
pragma: no-cache
cache-control: max-age=3600, s-max-age=84600
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Mon, 23 Jun 2025 16:04:12 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: BYPASS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=T%2FMA2BEcPxBs2fpcoO3476J4PRmZXwHvLPioEv1aOtPLj6xFZq1mC2UKT3COpFte%2BrMzRE7VA8Ph6%2BvnLJONyrkQ98Kme2%2FL"}]}
set-cookie: PHPSESSID=an311u9fkn262c7b5r6qsls0mu; SameSite=None; Secure; Path=/
cf-ray: 9545384a487e0b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=cOs7uwJdxMnLf3KX72i5KOSn2fd_i2C9TebFJs8ZVGQ
200 OK 567 kB URL GET support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=cOs7uwJdxMnLf3KX72i5KOSn2fd_i2C9TebFJs8ZVGQ
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (65460)
Size 567 kB (566897 bytes)
Hash c0bb28600cf931a17482376c5e27cabe
3c9b65f94334c9312f168ac51d2067d07db3a619
70eb3bbb025dc4c9cb7f7297ef68b928e4a7d9f77f8b60bd4de6c526cf195464
GET /lib/ucs/dist/ucsCreativeService.js?v=cOs7uwJdxMnLf3KX72i5KOSn2fd_i2C9TebFJs8ZVGQ HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd7414d7e92f1"
last-modified: Sat, 07 Jun 2025 00:15:41 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9HVU2GFC:0000000C
x-operationid: 88260b77346e12ee71b9e9c208aaf7e6
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvf
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
200 OK 2.7 kB URL GET support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (2674)
Hash 468d4acc570cffc7101ac8a63514ad31
6983e89b6ec798b5b8c2b3b76d9311808437b572
b4b342f2025799ca602a75590b324e7493b0903726720bce4ca793207c83255c
GET /js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd741b95897a8"
last-modified: Sat, 07 Jun 2025 00:18:42 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDGARBLA0QO:00000010
x-operationid: 9622a78f63374553c422ca82c799c592
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvw
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/light/latest.woff2
200 OK 27 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/light/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 27168, version 0.0
Hash b7640425501065524cec27d4a55a85ed
f254c388a65efb4b271c56deb5685a77ebe09d9d
fe8a1047376498c80a157d13555e42a92ad480fcb0bcc9de51ad1930fbeb7f91
GET /css/fonts/segoe-ui/west-european/light/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: font/woff2
content-length: 27168
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd739316eff20"
last-modified: Fri, 06 Jun 2025 23:17:38 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHVME8SM9O:00000051
x-operationid: 5182f0ac43f839f4c8360969dfacda94
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqw7
x-fd-int-roxy-purgeid: 0
x-cache-info: L1_T2
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET support.microsoft.com/css/fonts/segoe-ui/west-european/semibold/latest.woff2
200 OK 29 kB URL GET support.microsoft.com/css/fonts/segoe-ui/west-european/semibold/latest.woff2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 29388, version 0.0
Hash 6e75a94d5f7170a1ab532d32c2a35755
9c1b6fff544089941bbeddbcf529c3f0b46d853a
d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f
GET /css/fonts/segoe-ui/west-european/semibold/latest.woff2 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: font/woff2
content-length: 29388
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: "1dbd737eb65734c"
last-modified: Fri, 06 Jun 2025 23:08:31 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHRORQ30R3:00000129
x-operationid: 9f74070217016d8e5f7610b1aea6fdb7
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqw9
x-fd-int-roxy-purgeid: 0
x-cache-info: L2_T1
x-cache: TCP_REMOTE_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash 8278501dbbb703a7cfcba80996753279
26cf3dfbace722fa42325a364fa097451a514535
97e584667b960e18da257f81847b8fea60f48bb0ec2a86c4eedf0f8a1190b154
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-4.0.2
apikey: ac04587c8d6b439297eee84d88c95e8b-e1b6c3bf-fa11-485c-aebc-a825e1f68c8f-7432
upload-time: 1750694655237
time-delta-to-apply-millis: 727
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 5526
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Cookie: MC1=GUID=922d8692a6214a5487ee974835cbc95e&HASH=922d&LV=202506&V=4&LU=1750694654960; MS0=a1122cdd22ae4cefb917770cb85b8ae4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 317
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://support.microsoft.com
access-control-expose-headers: time-delta-millis
date: Mon, 23 Jun 2025 16:04:14 GMT
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/uZbx-si.png
200 OK 5.4 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/uZbx-si.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
Hash 51147eb9734c3c0caf22aa77a80d96f0
dc33807cd0c0c35bb98d8e23efe2d625137a43f5
92d8510869b3d581401a93130fa72e4b54c5bf28dc8005994c5248d9afbfc37b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /uZbx-si.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 5377
Content-Type: image/png
Content-MD5: URR+uXNMPAyvIqp3qA2W8A==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB2560628295F"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 74c4ebc1-f01e-003d-0358-e4ba4e000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET uhf.microsoft.com/images/microsoft/RE1Mu3b.png
200 OK 4.1 kB URL GET uhf.microsoft.com/images/microsoft/RE1Mu3b.png
IP
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectunistore.www.microsoft.com
Fingerprint26:CC:60:07:3D:11:5C:E8:B5:4D:F5:BB:FE:1C:74:E8:72:B5:3C:1E
ValidityTue, 15 Apr 2025 17:38:32 GMT - Fri, 10 Apr 2026 17:38:32 GMT
File type PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Hash 9f14c20150a003d7ce4de57c298f0fba
daa53cf17cc45878a1b153f3c3bf47dc9669d78f
112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960
GET /images/microsoft/RE1Mu3b.png HTTP/1.1
Host: uhf.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 4054
last-modified: Thu, 01 May 2025 01:26:44 GMT
etag: "0x8DD884F3BEF0076"
x-ms-request-id: d723e02b-601e-000d-6704-bb2885000000
x-ms-version: 2018-03-28
x-azure-ref: 20250502T023509Z-16668f9c644bggg8hC1STOrcss00000001b0000000005twq
x-fd-int-roxy-purgeid: 0
x-cache-info: L2_T2
accept-ranges: bytes
date: Mon, 23 Jun 2025 16:04:12 GMT
X-Firefox-Spdy: h2
GET support.microsoft.com/js/SilentSignInManager.Main.min.js?v=YhJIc9eIReDAmfom1ivxwN61e3gQDko8Dw4oru_ZXi4
200 OK 46 kB URL GET support.microsoft.com/js/SilentSignInManager.Main.min.js?v=YhJIc9eIReDAmfom1ivxwN61e3gQDko8Dw4oru_ZXi4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (45878)
Hash 2d239f75690602434780a10306b90c92
fd2005d03a856c786d53e7b28c00f5026727cfca
62124873d78845e0c099fa26d62bf1c0deb57b78100e4a3c0f0e28aeefd95e2e
GET /js/SilentSignInManager.Main.min.js?v=YhJIc9eIReDAmfom1ivxwN61e3gQDko8Dw4oru_ZXi4 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd740777b9475"
last-modified: Sat, 07 Jun 2025 00:09:42 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG6USDDN88:0000006D
x-operationid: 501cffef8216e6cb50806798577f4cff
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvr
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
200 OK 92 kB URL GET js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectjs.monitor.azure.com
FingerprintF0:FC:7A:8F:8F:E3:93:A9:47:0F:D2:64:88:E3:15:76:04:13:FC:06
ValidityTue, 20 May 2025 00:55:47 GMT - Fri, 15 May 2026 00:55:47 GMT
File type JavaScript source, ASCII text, with very long lines (65394)
Hash cf5cc7f4b57526cc37893dcb83ded031
e953783be0a7894585778455aae3d0df094d6f29
3a790b6c0d26d7a4d292cb27f992eafaff42c37e9318b2ab704207039127fcb8
GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1
Host: js.monitor.azure.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: no-transform, public, max-age=1800, immutable
last-modified: Wed, 05 Feb 2025 20:35:46 GMT
x-ms-request-id: 7be4d4fb-501e-0074-79ac-de19b1000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 3.2.18
x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250623T160413Z-17dfff7468474b6fhC1SVG9s740000000f30000000009uf4
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET edgecdnplus.com/png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found
200 OK 358 B URL GET edgecdnplus.com/png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectedgecdnplus.com
FingerprintC1:B2:F0:81:C9:57:71:AE:F8:EF:B3:B5:37:E5:D4:CF:D1:CA:47:3E
ValidityFri, 09 May 2025 06:51:35 GMT - Thu, 07 Aug 2025 07:49:46 GMT
File type ASCII text, with CRLF line terminators
Hash 54ab5c4cfcfe16c2e795964de121a0d8
19556801cc6b68f0e11081a07c6781924bc0bc65
30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835
GET /png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found HTTP/1.1
Host: edgecdnplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPSESSID=b470v86hnk0m2gkmc733djeit2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:04:25 GMT
content-type: text/javascript;charset=UTF-8
content-length: 134
server: cloudflare
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CAO PSA OUR"
last-modified: Mon, 23 Jun 2025 16:04:25 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FlosFMiBvcCZ2NlRFEpVhqb9Wq8O8rLznU53qoGuc6GymTdv1llEVB0tkGBTx%2BAClUu7XR1OAA7GH3Kmt3TQ0tCs3AKoI8rMvweKoa0%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9545389dfc2256a9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET viruswarning0623us05a.z13.web.core.windows.net/qsbs-firewall.png
200 OK 920 B URL GET viruswarning0623us05a.z13.web.core.windows.net/qsbs-firewall.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 77 x 63, 8-bit colormap, non-interlaced
Hash b0495ede4c875843fec037c794e9ff9a
c813aefba255a5cc53aea7811f987ccb551c3128
52b762d47c066e16300675d56cc359b504ffd3239438c96eb973864311bb7b79
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qsbs-firewall.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 920
Content-Type: image/png
Content-MD5: sEle3kyHWEP+wDfHlOn/mg==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605C72BDF"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 74c4eb8e-f01e-003d-5458-e4ba4e000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/re.gif
200 OK 15 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/re.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type GIF image data, version 89a, 193 x 71
Hash 6fcb78e0cd7933a70eea2cf071f82118
70364bffd62fe33360abe70ecc7f7c0541b3b54c
4b436b0b6a47db85c88f83dc3fe3fd9a96c0a4018b28832165df929dffe0bc86
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /re.gif HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 14751
Content-Type: image/gif
Content-MD5: b8t44M15M6cO6izwcfghGA==
Last-Modified: Mon, 23 Jun 2025 13:01:09 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605DA14D5"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 719ef741-601e-003f-6b58-e404f6000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
200 OK 3.0 kB URL GET support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (2974), with no line terminators
Hash 8c4035fbaa828a7e23b8584328fe8f88
f222869596f1e3e94c131de6e85bf233ed1ec511
0f4950468225bc51d24014536fe8004392a415ef01f0db92a258818e74f9c59e
GET /css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd7392fa4da1e"
last-modified: Fri, 06 Jun 2025 23:17:35 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHVMGI1TEA:00000023
x-operationid: f10035aa62ca65f2cb0c42f26270747f
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvc
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
200 OK 4.9 kB URL GET support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (4873), with no line terminators
Hash ed927cf0f8a1be103df48446270416ee
f7b2be7fc2b063aac03e76df9f3e19d615970213
ebdd298dfd39a35e5f54469f12953081a17cbea55f3a4a79c0fd4997d804f7d5
GET /css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd740089ddd09"
last-modified: Sat, 07 Jun 2025 00:06:36 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG5LHNRPRS:000000D7
x-operationid: 0042d7aa64017487977771d437712e93
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvd
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
200 OK 150 kB URL GET support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (65398)
Size 150 kB (149977 bytes)
Hash 107489d1ed6be77bfd69ebe4d7b52b6d
fd56df206a1dd0223d6d18adac841582282a346e
3bbc0000e28054ddbe38b2e7a21dca8d66fda56ea48448bce4658bc6b518a970
GET /lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd73859136459"
last-modified: Fri, 06 Jun 2025 23:11:35 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHT2HBC7G9:00000065
x-operationid: 77a45e181e9682425560fad3ccee3722
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvh
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/microsoft.png
200 OK 1.0 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/microsoft.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /microsoft.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1045
Content-Type: image/png
Content-MD5: vytGBZD7udjpYRpukAa4Fg==
Last-Modified: Mon, 23 Jun 2025 13:01:08 GMT
Accept-Ranges: bytes
ETag: "0x8DDB2560590457C"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d541-701e-0051-0f58-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/main.js
200 OK 1.3 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/main.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash ea8fb06fc01e486db6a19442db37d4e5
68e5462422131f619dfb70adb7265246d3f08bae
695007208ecc816ae6330beeace672e8bbc1bdc86ae38f622369a50d46575e61
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /main.js HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1286
Content-Type: text/javascript
Content-MD5: 6o+wb8AeSG22oZRC2zfU5Q==
Last-Modified: Mon, 23 Jun 2025 13:01:08 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25605887E6A"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 719ef6b6-601e-003f-0658-e404f6000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET userstatics.com/get/script.js?referrer=https://viruswarning0623us05a.z13.web.core.windows.net/
200 OK 133 B URL GET userstatics.com/get/script.js?referrer=https://viruswarning0623us05a.z13.web.core.windows.net/
IP
ASN #42624 Global-Data System IT Corporation
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerLet's Encrypt
Subjectuserstatics.com
Fingerprint3F:43:41:FC:A3:26:B1:6C:94:E6:7B:CB:28:BE:AF:64:55:24:94:A5
ValiditySat, 24 May 2025 07:06:37 GMT - Fri, 22 Aug 2025 07:06:36 GMT
File type ASCII text, with no line terminators
Hash fea7fbf2c619fd4b7716fcaa64070c6c
f192732937981a26f526b7c1293a2ae13bc59a22
df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26
GET /get/script.js?referrer=https://viruswarning0623us05a.z13.web.core.windows.net/ HTTP/1.1
Host: userstatics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Mon, 23 Jun 2025 16:04:13 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 133
Connection: keep-alive
X-Powered-By: PHP/8.2.1
Access-Control-Allow-Origin: https://viruswarning0623us05a.z13.web.core.windows.net
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With,content-type
Access-Control-Allow-Credentials: true
GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.ttf
404 The requested content does not exist. 321 B URL GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.ttf
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (321), with no line terminators
Hash 9bfcf1c374d0fc6e3377235063b78981
a68158635d248249290bfa7393fca972c14e5f6a
8edd5c79a6edf0d78accecb1fd7e42dd44942036b90157655220ae0aa7d97ab7
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.ttf HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/font-awesome.min.css
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653; sticky_lb_sess_id=zd7rzpiwdy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 The requested content does not exist.
Content-Length: 321
Content-Type: text/html
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-error-code: WebContentNotFound
x-ms-request-id: 7116dc38-701e-0051-2858-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:13 GMT
POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF5:C5:9C:FC:72:A4:DB:47:FA:EA:58:85:58:B7:37:59:82:EA:58:E1
ValidityThu, 27 Mar 2025 08:39:34 GMT - Tue, 23 Sep 2025 08:39:34 GMT
Hash 1e9d7188342c273eda216b8f88631632
4c591a307784da820d287617c66dac4f443240c8
04412c61ac128606e1289a2e73cd2fc411fb12a64f20d1714cdc174fdeb5cda4
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-4.0.2
apikey: ac04587c8d6b439297eee84d88c95e8b-e1b6c3bf-fa11-485c-aebc-a825e1f68c8f-7432
upload-time: 1750694654233
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 13716
Origin: https://support.microsoft.com
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=922d8692a6214a5487ee974835cbc95e&HASH=922d&LV=202506&V=4&LU=1750694654960; Domain=.microsoft.com; Expires=Tue, 23 Jun 2026 16:04:14 GMT; Path=/;Secure; SameSite=None
MS0=a1122cdd22ae4cefb917770cb85b8ae4; Domain=.microsoft.com; Expires=Mon, 23 Jun 2025 16:34:14 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 727
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://support.microsoft.com
access-control-expose-headers: time-delta-millis
date: Mon, 23 Jun 2025 16:04:14 GMT
X-Firefox-Spdy: h2
GET edgecdnplus.com/gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.823760785559883&evv=video&vid=beep&vindex=2&vaction=play&vtitle=beep&vurl=https%3A%2F%2Fviruswarning0623us05a.z13.web.core.windows.net%2F_Fm7-alert.mp3&vduration=0
200 OK 43 B URL GET edgecdnplus.com/gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.823760785559883&evv=video&vid=beep&vindex=2&vaction=play&vtitle=beep&vurl=https%3A%2F%2Fviruswarning0623us05a.z13.web.core.windows.net%2F_Fm7-alert.mp3&vduration=0
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectedgecdnplus.com
FingerprintC1:B2:F0:81:C9:57:71:AE:F8:EF:B3:B5:37:E5:D4:CF:D1:CA:47:3E
ValidityFri, 09 May 2025 06:51:35 GMT - Thu, 07 Aug 2025 07:49:46 GMT
File type GIF image data, version 89a, 1 x 1
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /gtr?sid=112665&ui=zd7rzpiwdy&aid=90930&u=https%3A//viruswarning0623us05a.z13.web.core.windows.net/&et=1&ti=Security%20center&touchpoints=0&sh=1024&sw=1280&sc=24&wsh=1024&wsw=1280&p=&l=en-US&c=Linux%20x86_64&w3=0ðe=0&cbas=0&phan=0&klay=0&glow=0&sola=0&bina=0&eqlw=0&tonp=0&mbox=0&trus=0&toke=0&meta=0&oper=0&coin=0&terr=0&xdef=0&math=0&tron=0&co98=0&clov=0&t=0&ja=1&fv=&MySearch=&uniqueid=&integrity=&ipname=&gdpr=2&Tag=&label=&iTag=&iPage=&utm_source=&src=&jv=0&ca=1&uidn=&hitc=&rev=&goal=&timing=1689&dm=viruswarning0623us05a.z13.web.core.windows.net&v=0.823760785559883&evv=video&vid=beep&vindex=2&vaction=play&vtitle=beep&vurl=https%3A%2F%2Fviruswarning0623us05a.z13.web.core.windows.net%2F_Fm7-alert.mp3&vduration=0 HTTP/1.1
Host: edgecdnplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPSESSID=b470v86hnk0m2gkmc733djeit2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:04:24 GMT
content-type: image/gif
server: cloudflare
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CAO PSA OUR"
last-modified: Mon, 23 Jun 2025 16:04:24 GMT
access-control-allow-origin: *
vary: User-Agent
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BwTMtRse9F3WSzZBUXqiaWgFGmRHMhHXrleaO7Y5W56VrPdDob7JjLzFw9et%2F5x02gjZK9W8TxkCbFkqasMh1RfPFQ9mt10PL6FTDxo%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 954538940e5e56a9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET viruswarning0623us05a.z13.web.core.windows.net/bg2.jpg
200 OK 550 B URL GET viruswarning0623us05a.z13.web.core.windows.net/bg2.jpg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (404)
Hash 69659e71aeb6127e6ef0dfe864d5ecd5
3cf318479957b4fc4f0fdf6af070a15d7dbd25ee
7d9ab165076915bc3854bab91e080fe05da9ccd8c9ae9058a3f1cf5fb09134c9
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /bg2.jpg HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 550
Content-Type: image/jpeg
Content-MD5: aWWeca62En5u8N/oZNXs1Q==
Last-Modified: Mon, 23 Jun 2025 13:01:04 GMT
Accept-Ranges: bytes
ETag: "0x8DDB25602ED9C54"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 719ef6f6-601e-003f-3458-e404f6000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:11 GMT
GET support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
200 OK 1.8 kB URL GET support.microsoft.com/css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (1789), with no line terminators
Hash a994a7e8c64a7067e10b96eb4ec80fd8
20afca199b332d7bf7d0fc629c2aff30eee2e20a
5d673164f48498dded9c758054c385b0094f26aedaba0e3d7d419bf2c693363c
GET /css/fonts/site-fonts.css?v=XWcxZPSEmN3tnHWAVMOFsAlPJq7aug49fUGb8saTNjw HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd7414cdd98fd"
last-modified: Sat, 07 Jun 2025 00:15:40 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDG9I0F1G7E:00000087
x-operationid: 3adf587b546ed729391a59133517e3ff
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqv7
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/glyphs/glyphs.css?v=VOnvhT441Pay0WAKH5gdcXXigXpiuNbaQcI9DgXyoDE
200 OK 11 kB URL GET support.microsoft.com/css/glyphs/glyphs.css?v=VOnvhT441Pay0WAKH5gdcXXigXpiuNbaQcI9DgXyoDE
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type Unicode text, UTF-8 text, with very long lines (10415), with no line terminators
Hash d21c241d2715c834d2ce124d322fcd63
47757084110cd18819f0c44bb6d5e93404329e54
598ee387b0aa10468563fadbaab6dbe49209add8639e699492455c7bf31f054d
GET /css/glyphs/glyphs.css?v=VOnvhT441Pay0WAKH5gdcXXigXpiuNbaQcI9DgXyoDE HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd741b958b7d6"
last-modified: Sat, 07 Jun 2025 00:18:42 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDGARBL9T3D:00000028
x-operationid: d9475fa4487cf8f3bac205cd9ed59306
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqv8
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/js/TabControl.min.js?v=xwEBryftfVeCnZQEcMrHh70Rw7qWo5RBGAM65Ie6n9E
200 OK 5.8 kB URL GET support.microsoft.com/js/TabControl.min.js?v=xwEBryftfVeCnZQEcMrHh70Rw7qWo5RBGAM65Ie6n9E
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (5781)
Hash 3e0da3fcc8786df60c5779aa73a48e7a
bab1fca9b33dc6d081c2ab2612e54d1affe75aaa
c70101af27ed7d57829d940470cac787bd11c3ba96a3944118033ae487ba9fd1
GET /js/TabControl.min.js?v=xwEBryftfVeCnZQEcMrHh70Rw7qWo5RBGAM65Ie6n9E HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd738587881c0"
last-modified: Fri, 06 Jun 2025 23:11:34 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHT2H7MV49:00000094
x-operationid: d7dab51b886ae82282a8f8a05cdd2f31
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvm
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
200 OK 90 kB URL GET support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0 HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:12 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd738c3c33484"
last-modified: Fri, 06 Jun 2025 23:14:34 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHUCA721JM:000000DF
x-operationid: 209d21710a7d8d9faf7d381460c3e3be
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160412Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqvg
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
200 OK 4.4 kB URL GET support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://support.microsoft.com/en-us/windows
Certificate IssuerMicrosoft Corporation
Subjectsupport.microsoft.com
Fingerprint92:2D:71:74:F7:22:C2:92:7B:5E:AF:61:13:8B:64:A2:C2:F0:57:6F
ValiditySat, 17 May 2025 17:12:39 GMT - Tue, 12 May 2026 17:12:39 GMT
File type ASCII text, with very long lines (4370), with no line terminators
Hash 5f05b23bad0f2d477c4e6b9266f99a74
e6cc0be0a86b8330b4fd16ce8eb27614fb313b40
70099f944ddce86c3b9e24ce88c3c489ef4c63cef20c4da64a5dc33bbfe36512
GET /css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI HTTP/1.1
Host: support.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.microsoft.com/en-us/windows
Cookie: EXPID=daa65059-c5cc-4502-b487-9e77f0463ffa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Jun 2025 16:04:13 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, proxy-revalidate, max-age=900, stale-while-revalidate=3600
etag: W/"1dbd739316e8412"
last-modified: Fri, 06 Jun 2025 23:17:38 GMT
request-context: appId=
strict-transport-security: max-age=31536000
x-correlationid: 0HNDHVME8SNNP:00000056
x-operationid: 5e052166e05a6bc66626665e9d3f1555
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref: 20250623T160413Z-17dfff74684xfpfxhC1SVGh0x40000000dtg00000000aqw6
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
X-Firefox-Spdy: h2
GET viruswarning0623us05a.z13.web.core.windows.net/microsoft.png
200 OK 1.0 kB URL GET viruswarning0623us05a.z13.web.core.windows.net/microsoft.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /microsoft.png HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653; sticky_lb_sess_id=zd7rzpiwdy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1045
Content-Type: image/png
Content-MD5: vytGBZD7udjpYRpukAa4Fg==
Last-Modified: Mon, 23 Jun 2025 13:01:08 GMT
Accept-Ranges: bytes
ETag: "0x8DDB2560590457C"
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7116d889-701e-0051-0758-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:12 GMT
GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.woff
404 The requested content does not exist. 321 B URL GET viruswarning0623us05a.z13.web.core.windows.net/fonts/fontawesome-webfont.woff
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerMicrosoft Corporation
Subject*.web.core.windows.net
Fingerprint04:FC:B7:06:A6:D3:4F:5D:8C:64:CB:61:C1:49:75:55:9D:12:34:1F
ValidityTue, 22 Apr 2025 15:45:16 GMT - Sun, 19 Oct 2025 15:45:16 GMT
File type HTML document, ASCII text, with very long lines (321), with no line terminators
Hash 75d2866a319ab088c724038d43a50be4
05369062a7be76fbee74b865718d59e33ca98f24
c71cca330ff4d54a6369f7f1b7206b196cdbd13fc9699f2cbc0083d36cfab496
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.woff HTTP/1.1
Host: viruswarning0623us05a.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/font-awesome.min.css
Cookie: PHPREFS=full; _ga_8ZDVYQ6PNR=GS2.1.s1750694652$o1$g0$t1750694652$j60$l0$h0; _ga=GA1.1.1046238781.1750694653; sticky_lb_sess_id=zd7rzpiwdy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 The requested content does not exist.
Content-Length: 321
Content-Type: text/html
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-error-code: WebContentNotFound
x-ms-request-id: 7116dbaf-701e-0051-4458-e451d9000000
x-ms-version: 2018-03-28
Date: Mon, 23 Jun 2025 16:04:13 GMT
GET edgecdnplus.com/png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found
200 OK 358 B URL GET edgecdnplus.com/png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found
IP
Requested by https://viruswarning0623us05a.z13.web.core.windows.net/
Certificate IssuerGoogle Trust Services
Subjectedgecdnplus.com
FingerprintC1:B2:F0:81:C9:57:71:AE:F8:EF:B3:B5:37:E5:D4:CF:D1:CA:47:3E
ValidityFri, 09 May 2025 06:51:35 GMT - Thu, 07 Aug 2025 07:49:46 GMT
File type ASCII text, with CRLF line terminators
Hash 54ab5c4cfcfe16c2e795964de121a0d8
19556801cc6b68f0e11081a07c6781924bc0bc65
30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835
GET /png?idle=0&aid=90930&sid=112665&temp_uid=zd7rzpiwdy&lang=auto&bat=&aplg=not%20found HTTP/1.1
Host: edgecdnplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://viruswarning0623us05a.z13.web.core.windows.net/
Cookie: PHPSESSID=b470v86hnk0m2gkmc733djeit2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 23 Jun 2025 16:04:15 GMT
content-type: text/javascript;charset=UTF-8
content-length: 134
server: cloudflare
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CAO PSA OUR"
last-modified: Mon, 23 Jun 2025 16:04:15 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NinGp9yfkQ8qEfCIjvV1DxrFHhVdPfY05zn7TFgd68yEWkXrWq2SZFg1IL7R5ld87%2BPGrma4jd%2Fv4gGLwd6VpgLHkWT61SsVSOtqMcg%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9545385ecfea56a9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
52.239.169.97
188.114.96.1
185.196.11.63
23.36.77.249
40.126.53.10
136.243.53.56
20.190.177.82
0.0.0.0