| outlook-live.pages.dev/assets/img/49_40171ffc2e13.jpg |  172.66.47.9 | 200 OK | 18 kB |
URL GET HTTP/3outlook-live.pages.dev/assets/img/49_40171ffc2e13.jpg IP172.66.47.9:443
Requested byhttps://outlook-live.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Hash7916a894ebde7d29c2cc29b267f1299f 78345ca08f9e2c3c2cc9b318950791b349211296 d8f5ab3e00202fd3b45be1acd95d677b137064001e171bc79b06826d98f1e1d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /assets/img/49_40171ffc2e13.jpg HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: image/jpeg
content-length: 17453
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "dd1e8965e19715d050ff4fccd72fa3e3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3y%2FXWIxJCcmZjX5wpXtJCDk5SYm9UzZNtTZwt0EDljIsrcK%2FpDwMEMgLUco86gPPyKJ06EOXpDMHdN%2BOq1%2BeJNFG74cXbEotvnHGIkaFvuO6k2ssf0ZV7CbCMUD9H4Rm%2BGDf%2BjxegfnQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb20690c5694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| outlook-live.pages.dev/favicon.ico | 172.66.47.9 | 200 OK | 10 kB |
URL GET HTTP/3outlook-live.pages.dev/favicon.ico IP172.66.47.9:443
Requested byhttps://outlook-live.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: image/x-icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b52ae8d8fe9d158bb668e6c4d9c14505"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BE6u9y%2FoRkKBFJA4ZC1Zx06x7NLw6WLyU7iA0ZuvqzXfOtElu18G4mS6Q%2BAmcpYm%2FrskLS0Jh4u89cBrHuHDg08C3S%2F%2BMij16xhH4dQoOClLTaBL3DxSog%2ByD2jdDTPRdndcgJDxqXjG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb214a1b5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 172.66.47.9 | 200 OK | 3.5 kB |
URL User Request GET HTTP/2IP172.66.47.9:443
CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeHTML document, ASCII text, with very long lines (3649), with no line terminators Hashccec6f78651b660b2f5ba893e513281c cf9ae587d4eff589d646e75b72bb8d9862115a7d 17aa105b7f13bfff79472fecdc69514379b0744241eae89f12443e16b9db9d4d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"14723ab2311bea2eb4f31ff49888a2fe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tlwu8GEeQMKu6TCxUe%2By%2BXV%2BlCDrLP9jCZ%2BT%2FBIo4oEiEhblKt64VGr0g2bjLH5E0T6YcV%2ByR%2BfmARj4ITEUQzl%2BHQJayVM10N8EbyGZePmJxc%2FhxtdVZGcIWRw8zvVzn37yJOIHYvn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb1dde41b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| outlook-live.pages.dev/polyfills-LZBJRJJE.js | 172.66.47.9 | 200 OK | 34 kB |
URL GET HTTP/3outlook-live.pages.dev/polyfills-LZBJRJJE.js IP172.66.47.9:443
Requested byhttps://outlook-live.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeJavaScript source, ASCII text, with very long lines (17120) Hashc45ad4153f1515c2edd0eee47d846d19 fda1c82c5c620f1fa442f687b3df45a037f6fcc9 001884437346271643352b13af12717b3690524ab08efff5e69e660f8247a3e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /polyfills-LZBJRJJE.js HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ce37eac3addb242fbeba10de8890b275"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LyDgBSLdXc%2FycKLoDO4%2FhhcXPS8VmCK71GAg6rdX3eV6mVnUjJGQnRX3llGpUc0s5UZq6aaB6B6QZGc0tzk6PpVWULsCPo0kd3U57P8lN5%2FABLZzSd9poOpF%2Bl5jRP1%2FNi%2FxxPgiu4Pu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb1f0f6a5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| outlook-live.pages.dev/main-LJWZZRPM.js | 172.66.47.9 | 200 OK | 224 kB |
URL GET HTTP/3outlook-live.pages.dev/main-LJWZZRPM.js IP172.66.47.9:443
Requested byhttps://outlook-live.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeJavaScript source, ASCII text, with very long lines (38127) Size224 kB (223650 bytes) Hashbd7375e5977c4fd0d0269aca91872dfa af74dbac0b2174b9fbc0d01698e7be045527db3f 0d78d4d5bf773689e363b61ebd71fee878c6d1d644ae6690ec941f6f0f60e030
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /main-LJWZZRPM.js HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1fcbd20d15782b21535a5db1dc9b73b0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jNXlRGFS%2BQxnBbHhkVYpyoxkyWRRie3bkc9tIdDEYmdIV47gEDW7z7ydi6wpVd1HtlpAzoCBVhAdBFlcaFQTskzhnpUklyRQeNI59huWlQ7XeazDu8PYuRUWtrsBjyby8RDv%2BILsl8Tt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb1f0f6d5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| outlook-live.pages.dev/styles-QT5DOLS3.css | 172.66.47.9 | 200 OK | 104 kB |
URL GET HTTP/3outlook-live.pages.dev/styles-QT5DOLS3.css IP172.66.47.9:443
Requested byhttps://outlook-live.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectoutlook-live.pages.dev Fingerprint53:00:B7:64:68:05:04:DD:E1:D6:E3:03:1A:6A:CA:8E:6B:66:99:59 ValidityWed, 03 Apr 2024 12:39:04 GMT - Tue, 02 Jul 2024 12:39:03 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size104 kB (103598 bytes) Hashdec069f96ba6c3d3f778dc4716ab5f2b 2a0be353e51e319f64281d1cdf31587e4fd66896 a2adf6ec6eb3637473187d726df0a8a14f794feb08bb4795738af17508fcdfb5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /styles-QT5DOLS3.css HTTP/1.1
Host: outlook-live.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:25:35 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"de2f0ad1b551d255e9ab10c851c9a20b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TiD0ATrOMBYtqty5jPAkh%2BC2vm6GNC3T0HIOx4MAxOvuuBxcfJ%2FNMQ7EGhvOflp%2BcAM1JnSZAiI2xh%2F%2Ba94FZWEuaBwfZCNJ3FfNqScw6aG%2FjPsNObWlu5Hn66UMN58paJq9YGqaz%2Bpk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797cb1f0f705694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| outlbot.onrender.com/status |  0.0.0.0 | | 0 B |
URL GET outlbot.onrender.com/status IP0.0.0.0:0
Requested byhttps://outlook-live.pages.dev/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /status HTTP/1.1
Host: outlbot.onrender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://outlook-live.pages.dev/
Origin: https://outlook-live.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|