ocsp.pki.goog/gts1c3
471 B IP
Hash 99be36469955be1b23dd757524db523d
9ce0d601875bbb04d9021e0e8d548e4fb07d785b
79349d39dc9ff8ecaa6e681e0bede01bb0e831c0d866ac9b7c8d08b97a9ad9f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:38:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
200 OK 15 kB URL User Request GET HTTP/2 farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.appspot.com
Fingerprint27:1A:CB:7B:B5:5A:99:64:39:A5:79:37:19:2C:A7:38:24:41:31:C9
ValidityFri, 19 May 2023 12:52:44 GMT - Fri, 11 Aug 2023 12:52:43 GMT
File type HTML document, ASCII text, with very long lines (52815)
Hash 2341eaad64b046a8eac177fd23d9ac25
e2467b72db746fc00b1c6946e7dad9df4db17ddb
4f5d68683c45712e70c0cb1425f9851332ec49e2cea2ae7da0a09719c9b83ade
Analyzer Verdict Alert openphish Outlook
GET / HTTP/1.1
Host: farmersmil2-dot-msfiles24explorer.uk.r.appspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
x-cloud-trace-context: cb16793218f7929b19fc7ccb1c9e3c61
vary: Accept-Encoding
date: Tue, 06 Jun 2023 00:38:22 GMT
server: Google Frontend
cache-control: private
content-length: 14573
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 3a33b1185ea483163ce9f12f36d16090
1adf053b10cd49105b2356c187f18afe800df1a1
1e80f25e4156c8b98000fb338b69c14c09369008e10975baece2abef44947cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:38:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_59_uuouser7hrkmvbaz1jw2.css
200 OK 20 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_59_uuouser7hrkmvbaz1jw2.css
IP
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash e7dfd450e52c7abec7aca315040cf58f
6b1d636313e0c81e39bf1ae840e4fa02c657166f
1e3dceb93e7c252036cfcded7e108e7e2473dae923a2401a84dd7925f5a9f0ad
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_59_uuouser7hrkmvbaz1jw2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 27815575
cache-control: public, max-age=31536000
content-md5: bjqCIB9rMEZAA8TrOKRGgQ==
content-type: text/css
date: Tue, 06 Jun 2023 00:38:23 GMT
etag: 0x8D872D16C711C33
last-modified: Sat, 17 Oct 2020 19:18:26 GMT
server: ECAcc (ska/F6B6)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: ab49b811-201e-0093-2914-9b6a88000000
x-ms-version: 2009-09-19
content-length: 19771
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.1.11.min__yok_chwseypwbmuffnnaa2.js
200 OK 39 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.1.11.min__yok_chwseypwbmuffnnaa2.js
IP
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (733)
Hash fd838afc285649ec8fc013147df9cd00
3e5dfe6ab069c30d5e849e86d617f6d2cf748cd5
35cceb3348d8d50cb9d46478114cc11727f9b3e78b08fc7f07101aea4bad7d1c
GET /ests/2.1/content/cdnbundles/jquery.1.11.min__yok_chwseypwbmuffnnaa2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 28887582
cache-control: public, max-age=31536000
content-md5: rh/aFGJ6VR89aDdTZ7hodQ==
content-type: application/x-javascript
date: Tue, 06 Jun 2023 00:38:23 GMT
etag: 0x8D876CB2080AB77
last-modified: Thu, 22 Oct 2020 20:43:26 GMT
server: ECAcc (ska/F7B9)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 36fc386b-b01e-0072-3e54-91ee33000000
x-ms-version: 2009-09-19
content-length: 38927
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_ynywyfekfmsp3ljup2epra2.js
200 OK 44 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_ynywyfekfmsp3ljup2epra2.js
IP
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash 6276306057a47e6b29dcb8d4a7612944
79388d53786849c4e522f423a47cf1e3f519ec89
4a3c3d489ffcf962a1279ebe7e1ba3582e4debffdde6ef9a0ff2b4bd839a53b9
GET /ests/2.1/content/cdnbundles/aad.login.min_ynywyfekfmsp3ljup2epra2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 9838260
cache-control: public, max-age=31536000
content-md5: 7Zr/RHMNzHhijIc1jDYQ/w==
content-type: application/x-javascript
date: Tue, 06 Jun 2023 00:38:23 GMT
etag: 0x8D876CB187B0320
last-modified: Thu, 22 Oct 2020 20:43:13 GMT
server: ECAcc (ska/F773)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e86a3238-a01e-005f-6d94-3ea2ec000000
x-ms-version: 2009-09-19
content-length: 44333
X-Firefox-Spdy: h2
logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
200 OK 1.4 kB URL GET HTTP/2 logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
FingerprintEE:40:2D:5A:6D:D7:45:A2:7B:73:AC:5A:A3:0A:9C:D7:D5:BB:5A:E4
ValidityTue, 23 Aug 2022 22:36:46 GMT - Fri, 18 Aug 2023 22:36:46 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 12284060
cache-control: public, max-age=31536000
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
content-type: image/svg+xml
date: Tue, 06 Jun 2023 00:38:23 GMT
etag: 0x8D79ED29CF0C29A
last-modified: Wed, 22 Jan 2020 00:32:50 GMT
server: ECAcc (ska/F7B5)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: fd0c0cdd-301e-0034-1256-28f450000000
x-ms-version: 2009-09-19
content-length: 1435
X-Firefox-Spdy: h2
outlook.office365.com/owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363
302 Found 264 B URL GET HTTP/1.1 outlook.office365.com/owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectoutlook.com
FingerprintAB:21:82:47:32:03:3E:C2:D0:F7:2A:88:50:E9:67:39:90:49:C0:FE
ValidityThu, 27 Apr 2023 00:00:00 GMT - Fri, 26 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52bcded6ad060df3b7f25c411ea490d4
98bae55e192c1cc5b6bea81d6450136dbacf66e2
dcf760270ec58313134c7b9d11b4def7a1e3a840e6a294700736ea622c8b10e7
GET /owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363 HTTP/1.1
Host: outlook.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Location: https://outlook.office.com/owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363&pngSites=none
Server: Microsoft-IIS/10.0
request-id: 5a05308a-fafc-1409-593d-52e2061e0383
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Alt-Svc: h3=":443",h3-29=":443"
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: UserContext=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SuiteServiceProxyKey=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
DefaultAnchorMailbox=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
O365Consumer=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
HostSwitchPrg=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SdfV2LDomain=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
OptInPrg=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
LI=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
UserContext=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SuiteServiceProxyKey=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
DefaultAnchorMailbox=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
O365Consumer=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
HostSwitchPrg=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SdfV2LDomain=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
OptInPrg=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
LI=; domain=outlook.office365.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
RPSAuth=; domain=outlook.office365.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None
RPSSecAuth=; domain=outlook.office365.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None; secure
RPSClearCT=; domain=outlook.office365.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None; secure
X-FirstHopCafeEFZ: OSL
X-FEProxyInfo: OS6P279CA0011.NORP279.PROD.OUTLOOK.COM
X-FEEFZInfo: OSL
X-Powered-By: ASP.NET
Date: Tue, 06 Jun 2023 00:38:22 GMT
Content-Length: 264
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
200 OK 17 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 511395
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Tue, 06 Jun 2023 00:38:23 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/suiteux.shell.msaltokenfactoryiframe.d6ea79b4a0c6c339b320.js
200 OK 82 kB URL GET HTTP/2 res-1.cdn.office.net/shellux/suiteux.shell.msaltokenfactoryiframe.d6ea79b4a0c6c339b320.js
IP
ASN #20940 Akamai International B.V.
Requested by https://webshell.suite.office.com/iframe/TokenFactoryIframe/Logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (28007)
Hash ace07f50cf4c83c4bebc4ae897ac3063
22c3e721bec55a3f99ac56111e325ee362127c94
ce5b8449dc78b1eb450e37153118e41cfc5abd9bfe3ed92042cb71f7c97b3ffe
GET /shellux/suiteux.shell.msaltokenfactoryiframe.d6ea79b4a0c6c339b320.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webshell.suite.office.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 82348
last-modified: Wed, 24 May 2023 13:45:16 GMT
x-ms-request-id: e9478d40-e01e-0059-4841-937814000000
content-encoding: br
cache-control: max-age=630720000
date: Tue, 06 Jun 2023 00:38:23 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1686011903.73f64766"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
webshell.suite.office.com/iframe/TokenFactoryIframe/Logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
200 OK 416 B URL GET HTTP/2 webshell.suite.office.com/iframe/TokenFactoryIframe/Logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerMicrosoft Corporation
Subjectwebshell.suite.office.com
Fingerprint86:2E:E0:71:4B:63:12:8D:25:42:B2:B3:D0:C2:15:BA:DC:9B:2C:4C
ValidityThu, 29 Sep 2022 18:52:32 GMT - Sun, 24 Sep 2023 18:52:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (450), with no line terminators
Hash 3a112d165a68c7ec247a271f88773bbe
59af4391efb153c991548a4c6e7f786a75bdf3a9
cc4d660d5cbbe1765057d4b12bec1bbdc7bc1c71d32c6bc9090cf89e986252a8
GET /iframe/TokenFactoryIframe/Logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363 HTTP/1.1
Host: webshell.suite.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Tue, 06 Jun 2023 00:38:22 GMT
server: Kestrel
cache-control: private,max-age=3600
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
content-security-policy: default-src 'none'; frame-src *; script-src https://res-1.cdn.office.net https://shell.cdn.office.net 'nonce-JaP52IlPxecWceRgVMy0WLngMCRn0V0ejNMo3dobPI0=' 'unsafe-inline'; connect-src *;
cross-origin-resource-policy: cross-origin
x-o365suiteuxshell-correlationid: e39c90f7-f116-4bee-b9dd-00ad0d671910
X-Firefox-Spdy: h2
www.microsoft365.com/logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363&from=logout
200 OK 1.3 kB URL GET HTTP/2 www.microsoft365.com/logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363&from=logout
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.office.com/logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintFD:5E:6C:0F:B5:92:68:8A:B2:0C:23:EB:0C:6B:F7:A0:88:FC:0E:EB
ValidityMon, 01 May 2023 18:46:35 GMT - Thu, 25 Apr 2024 18:46:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350), with no line terminators
Hash dc2a8ea855b0fe9e5c53c9f28504b5ee
bf8ffc1ced8678ebc190ed20ee8338bad6d3df77
f417c784a978c2253205528353e9eca1a69b8e7f4e613583854c35e4ce7a15b4
GET /logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363&from=logout HTTP/1.1
Host: www.microsoft365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.office.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: OH.SID=a2f51ccb-327f-4526-9a76-a4d962146650; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Tue, 06 Jun 2023 08:38:23 GMT; path=/; secure; samesite=none; httponly
OH.FLID=744eaf9a-6ed8-4af7-a42f-b905055718e2; expires=Thu, 06 Jun 2024 00:38:23 GMT; path=/; secure; samesite=none; httponly
UserIndex=; expires=Mon, 05 Jun 2023 00:38:23 GMT; path=/; secure; samesite=none; httponly
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 3289CEF8061A495CA40D08D70CB53D01 Ref B: SVG20EDGE0321 Ref C: 2023-06-06T00:38:23Z
date: Tue, 06 Jun 2023 00:38:23 GMT
X-Firefox-Spdy: h2
www.office.com/logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
200 OK 1.4 kB URL GET HTTP/2 www.office.com/logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintFD:5E:6C:0F:B5:92:68:8A:B2:0C:23:EB:0C:6B:F7:A0:88:FC:0E:EB
ValidityMon, 01 May 2023 18:46:35 GMT - Thu, 25 Apr 2024 18:46:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1488), with no line terminators
Hash ad70fdf02456876a483bff03f0310b14
a505fd21ca90856be98014260f55842f3e08ef28
99ce8446ea4a73a14e27943c727cd31ddd7b23e66c4b142e00b0ec92aea14803
GET /logout?sid=494fe386-9fa1-4fbf-885f-5038fa243363 HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: OH.SID=5e88b140-493c-4837-bfa7-79f691f1407f; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Tue, 06 Jun 2023 08:38:23 GMT; path=/; secure; samesite=none; httponly
OH.FLID=08faaa79-0e04-4ea8-882e-0d7991ef9ea0; expires=Thu, 06 Jun 2024 00:38:23 GMT; path=/; secure; samesite=none; httponly
UserIndex=; expires=Mon, 05 Jun 2023 00:38:23 GMT; path=/; secure; samesite=none; httponly
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 490718B9BCD74A2DBFCC5D7AA54BC244 Ref B: SVG20EDGE0321 Ref C: 2023-06-06T00:38:23Z
date: Tue, 06 Jun 2023 00:38:23 GMT
X-Firefox-Spdy: h2
outlook.office.com/owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363&pngSites=none
200 OK 263 B URL GET HTTP/2 outlook.office.com/owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363&pngSites=none
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
Certificate IssuerDigiCert Inc
Subjectoutlook.com
FingerprintAB:21:82:47:32:03:3E:C2:D0:F7:2A:88:50:E9:67:39:90:49:C0:FE
ValidityThu, 27 Apr 2023 00:00:00 GMT - Fri, 26 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 16 x 16\012- data
Hash fd94bdd0265787e0b23ba9369dc3f6a9
2475af677f59831a62fa28c655147a9f81a01c44
7ad1ad65fa56e4154d943099b98bcf6d8dd59df30f637f1088b2c228bb5a5c79
GET /owa/auth/logoff.aspx?cmd=logoff&exlive=1&lgtype=1&sid=494fe386-9fa1-4fbf-885f-5038fa243363&pngSites=none HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://farmersmil2-dot-msfiles24explorer.uk.r.appspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-type: image/gif
server: Microsoft-IIS/10.0
request-id: 996a76fc-afe9-f3fd-8629-840bb0546815
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443",h3-29=":443"
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
x-aspnet-version: 4.0.30319
set-cookie: UserContext=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SuiteServiceProxyKey=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
DefaultAnchorMailbox=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
O365Consumer=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
HostSwitchPrg=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SdfV2LDomain=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
OptInPrg=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
LI=; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
UserContext=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SuiteServiceProxyKey=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
DefaultAnchorMailbox=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
O365Consumer=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
HostSwitchPrg=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
SdfV2LDomain=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
OptInPrg=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
LI=; domain=outlook.office.com; expires=Sun, 06-Jun-1993 00:38:23 GMT; path=/; secure
RPSAuth=; domain=outlook.office.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None
RPSSecAuth=; domain=outlook.office.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None; secure
RPSClearCT=; domain=outlook.office.com; expires=Thu, 30-Oct-1980 16:00:00 GMT; path=/;SameSite=None; secure
x-firsthopcafeefz: OSL
x-feproxyinfo: OS6P279CA0147.NORP279.PROD.OUTLOOK.COM
x-feefzinfo: OSL
x-powered-by: ASP.NET
date: Tue, 06 Jun 2023 00:38:22 GMT
X-Firefox-Spdy: h2
142.250.74.116
95.101.10.208
52.111.209.6
0.0.0.0