Report - office-client.pages.dev/robots.txt

Report Overview

Submitted URL
office-client.pages.dev/robots.txt
IP
172.66.47.162
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 17:20:32
Access
public
Website Title
Sign in to your account
Final URL
office-client.pages.dev/robots.txt#/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
office-client.pages.dev	unknown	2020-09-02	2022-12-15	2024-03-15	7.6 kB	943 kB	172.66.44.94
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-03-27	465 B	57 kB	151.101.65.229
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-03-28	458 B	2.0 kB	142.250.74.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook
2024-03-13	medium	office-client.pages.dev/robots.txt	Outlook
2024-03-13	medium	office-client.pages.dev/	Outlook

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	office-client.pages.dev/js/app.646548f3.js	6.0 kB	2024-03-13	2024-04-13
Pretty URL office-client.pages.dev/js/app.646548f3.js IP 172.66.44.94 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 17:10:51 Last Seen2024-04-13 18:14:47 Times Seen8 Hash 463b31731536bfd54bd5b85d14c6e8d6 1f9dd5ddfe16398744a0447b19f144d9a423d78d 40104bd63d5698aa7a9298590b3a8dcd72aabcab122609ce3fe40a3e4f9f543a Loading...

	office-client.pages.dev/js/chunk-vendors.994ef643.js	212 kB	2024-03-13	2024-04-13
Pretty URL office-client.pages.dev/js/chunk-vendors.994ef643.js IP 172.66.44.94 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 17:10:51 Last Seen2024-04-13 18:14:47 Times Seen9 Hash 582d4ef65db8136e037decf8a3dd9ffe ec28f99f7a412026f88f2aabbaa6ccf4d4a3cc02 9d35b9b309dc9253d3c81d23126d734489ef041dba054514fbb1ce3c94980c6a Loading...

HTTP Transactions (18)

URL IP Response Size

cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css

151.101.65.229

200 OK

56 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
56 kB (55843 bytes)
Hash
2c83c4bce691e18f82409f87b2bf84e4
3958d951f073022975e50de0c711a17bfa1b703f
03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962

HTTP Headers

GET /npm/@mdi/font@latest/css/materialdesignicons.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 7.4.47
x-jsd-version-type: version
etag: W/"54a02-OVjZUfBzAil15Q3gxxGhe/obcD8"
content-encoding: br
accept-ranges: bytes
date: Thu, 28 Mar 2024 17:20:06 GMT
age: 25654
x-served-by: cache-fra-etou8220025-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 55843
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900

142.250.74.170

200 OK

1.3 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
gzip compressed data, max compression
Size
1.3 kB (1335 bytes)
Hash
81281dcd0c5ce7aef8011bdd14bc9313
dde54b2e4ed386489022ec06a40720d3420fc0bc
2ce5f9a80c416ce727243b52b46d899da8bdc1279b297e70a016553bf461c6b3

HTTP Headers

GET /css?family=Roboto:100,300,400,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 28 Mar 2024 17:20:06 GMT
date: Thu, 28 Mar 2024 17:20:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

office-client.pages.dev/img/settings.86404f83.png

172.66.44.94

200 OK

490 kB

URL GET HTTP/3
office-client.pages.dev/img/settings.86404f83.png
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
PNG image data, 2760 x 1500, 8-bit/color RGBA, non-interlaced
Size
490 kB (490022 bytes)
Hash
86404f83d1879c956426a556801a41ac
58801a73a2021fda4d40279d3dbda086c79569ad
11daaafd44155d2c69709d507b3b2d3c917319528b4abc90da55945d8a80f04f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /img/settings.86404f83.png HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: image/png
content-length: 490022
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7f6df98a5d74e4067aae63c1fcfa995c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0SZSOtUIyd2reD1iiz6cVqPDeXtAWy922HjCvgJ0GkaGyxMM5Fzs178kkSrajJcduGr%2F%2BUMkN3ZPf%2B92HfMXTcUPXMuH4ILTrEn8Emu83%2FD2QrqZZfyHSUgRhzxU9V4YSEpE4GIbWnlFXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fbbfc056b1-OSL
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/css/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.66bb253e.css

172.66.44.94

200 OK

14 kB

URL GET HTTP/3
office-client.pages.dev/css/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.66bb253e.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
ASCII text, with very long lines (52990), with no line terminators
Size
14 kB (13922 bytes)
Hash
601bd676aa24600f7b48735fa83f9f91
e3fc020e344ba3788cd8cf9ad270ecf75e0397c5
f1c9a75d576fc4e1da362422deac51ebbf8de9bcef3f702171dd231c07be6f88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.66bb253e.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5c7c7a5cb73cb6b842e2d9a2594bfa1f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DA9vGmZa7uI67ZZ44iaAYEO9czke6KAQ5ony3h%2FA%2BOhRCdwnnIkzXjaK%2Ff8xQEw8k4BOvj3rj%2BHTBuwpb3kR5MjEXSZWbVZJWKsNr77AROiYvzy%2Bxv7Y1lh0L6lbiHfHaX3NjYD1RC8V3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fcf91a56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/chunk-vendors.994ef643.js

172.66.44.94

200 OK

88 kB

URL GET HTTP/3
office-client.pages.dev/js/chunk-vendors.994ef643.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (52534)
Size
88 kB (88173 bytes)
Hash
582d4ef65db8136e037decf8a3dd9ffe
ec28f99f7a412026f88f2aabbaa6ccf4d4a3cc02
9d35b9b309dc9253d3c81d23126d734489ef041dba054514fbb1ce3c94980c6a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/chunk-vendors.994ef643.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:06 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"38a70d6dfc7219db7fb10674d4533392"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EyekaVX6rsirAq9cQPOyPU9XEOZZLDd3csKLT9KAhaPlLkk3fC0Kwk7o9R9WNnGzEsMs%2BLVsTyIVHwE6xx9LY8maZmMX1e2%2Ff02EDF3YBIorOq%2FIKLfCAiWr4nkkavi4JuED6Xwjk7wfog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949f8fc9656b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/favicon.ico

172.66.44.94

200 OK

6.3 kB

URL GET HTTP/3
office-client.pages.dev/favicon.ico
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Size
6.3 kB (6284 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: image/x-icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b52ae8d8fe9d158bb668e6c4d9c14505"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDRiKDbE%2FLCxnSb%2BqC2V3%2BpuYOEYT4ycdUTlIqdZarI7nvo5ecDVBVmlgCKyrilJpB4%2BfE0vD%2FJPFTMYn5iKZwbcdA%2B2ss8eWQayhD8zSehvEv5TpJRVgbYB4LkIU%2FIVADfkvmGqzK7u5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fc586a56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/css/mobileLoginForm.a9208b1c.css

172.66.44.94

200 OK

6.9 kB

URL GET HTTP/3
office-client.pages.dev/css/mobileLoginForm.a9208b1c.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
ASCII text, with no line terminators
Size
6.9 kB (6945 bytes)
Hash
e7e0fefce4be886c08bb80d8f4be8c6c
c727d76e587df06612b7e33ab79e2919acc0c140
947db4d222e78410e1098ef6789a1eb79a5ee269fbe31db9f32c3a11550e0de8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/mobileLoginForm.a9208b1c.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d6543ca375a122c0fd994904eda05e73"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JC4AZgmEakKY7lOthuN2BusYy4b1Y9hhJLTuVRXVHaM7hPmkxxsGytZGMzawZmjwjp2r3lwGiepoA%2BzF8MDHXMMpZiKYjGfjXI1xnz57UhaQ8Pgk8aTyq9a1h9oCE58bJif8RCQ4u7GTog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fd092256b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/SMSVerificationForm.b4c575ca.js

172.66.44.94

200 OK

8.6 kB

URL GET HTTP/3
office-client.pages.dev/js/SMSVerificationForm.b4c575ca.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (4621)
Size
8.6 kB (8626 bytes)
Hash
a9e8d1f21b4a71e489aa762658fa4d2b
48b16e2b139e347bf81052acdf6b9a6e6e587cce
a951415f7590de554f331b589aad5b89f29d626d133662b2f374920c63849403

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/SMSVerificationForm.b4c575ca.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"41945a34aae89ed890a2e541b4a04f4b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSn3ToIcuyDfkIO%2BwzPjgaE%2FQIs3iU%2BxZeChkHDaDN4ymIMoVi4lhi6rg2U6Ss%2FhnpI8U2pjbC1mGbIwpg6pc2%2FsyO3AR2UJ3YNKwjLWvuj0Uqjr4HiPeZnqoalJC65N%2BdZtyvCM7EYCaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fd99f456b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/css/SMSVerificationForm~mobileLoginForm.20c3a3dd.css

172.66.44.94

200 OK

24 kB

URL GET HTTP/3
office-client.pages.dev/css/SMSVerificationForm~mobileLoginForm.20c3a3dd.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
ASCII text, with very long lines (24037), with no line terminators
Size
24 kB (24037 bytes)
Hash
585b3b87a1b28841f95981716f116216
08d2fdac4f05ad71bfc9ab4946cb5a37d19e8f02
8e6b5169e0c02337db280986c8a39dff93e73e60e42417f5fdc336b22b097fff

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/SMSVerificationForm~mobileLoginForm.20c3a3dd.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a73ce6d17c2a3dc7fc745e2e34be71b1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T7XqYjefy35UT3GXVhTPFrTIygASsVS7m9V3hqr4%2FCtLDSdpUqmt83MWVZlcPLFF42WVe2gC7ltV%2Fkt83xcZfhmNZBQzOGVHbdumyVxNyhh6zlVYZUbUEtngo%2B%2BmhFLPtTTtcynpNJTPUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fcf91e56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/mobileLoginForm.718bdae5.js

172.66.44.94

200 OK

5.9 kB

URL GET HTTP/3
office-client.pages.dev/js/mobileLoginForm.718bdae5.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (6256), with no line terminators
Size
5.9 kB (5913 bytes)
Hash
04a74e1418859ae8d6ef85541d1f5ca4
735b220f9ed3077f042423b92318d994f19c998e
1c13d68a1a21ddf29ba25c21b081289ecc244336b1a2bfc898d3067e6991db44

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/mobileLoginForm.718bdae5.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3824d9efadf8c9b7d2528ed079e0f6d4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRMp2HXCivDedY5FG8gsD%2F%2FjLVVV8qLtSIFk0zi5xsyql7cDMw2dJlLkTcyWuO8h3dFAcF8R9yJ%2BiszRNyDUUS1WN2GS9lIMLmPWFdPxuuVH20f7ekJEz8KIoER2D5iqialV6odnaMwz1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fdaa0e56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/css/chunk-vendors.3d7e53ea.css

172.66.44.94

200 OK

219 kB

URL GET HTTP/3
office-client.pages.dev/css/chunk-vendors.3d7e53ea.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type

Size
219 kB (219141 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/chunk-vendors.3d7e53ea.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:06 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a5ab21ab18ea669a793a9d697c5391c8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QT1rKVVbxKl0j%2F%2FjzkUT92O2kDWS4CB6PvViq%2FmSBDXz%2F2vGBaS%2F2%2F8PttPi%2BWDgRFpVJyoe7biwPhsBHxgu3VaitlEY78k7jGnyfhCfQlaW9PUsY7yCi2yaXJBpv0eTdQfoGyWVwRy0pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949f8fc9456b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/app.646548f3.js

172.66.44.94

200 OK

6.0 kB

URL GET HTTP/3
office-client.pages.dev/js/app.646548f3.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (6294), with no line terminators
Size
6.0 kB (6037 bytes)
Hash
e9b88e8a85fed33eb1400255b9780c69
38a34cc9865b6b9965d95b5a8908819cbccd882b
9073e3a659dfc3df3fdb8e506062cd2569a0da297669555ed1837dd0aaafae26

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/app.646548f3.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:06 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fecd3cc2579be72f0498813c7404804c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YxObvMY%2FDoIhLx5cA1Y0%2B3WqpYjTiVAChhNZQoYR%2Fp8E27WvZBVjGifoEBAW9OoRNa92Dtr7I6aBKFNPxBpdnbBTHlMuuBvsSETPAl42QhDzMdMc10xFAzR3XXlmUt1s%2BP81lum5Vb1nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949f8fc9556b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/css/AuthVerificationForm.a9208b1c.css

172.66.44.94

200 OK

69 B

URL GET HTTP/3
office-client.pages.dev/css/AuthVerificationForm.a9208b1c.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
ASCII text, with no line terminators
Size
69 B (69 bytes)
Hash
e7e0fefce4be886c08bb80d8f4be8c6c
c727d76e587df06612b7e33ab79e2919acc0c140
947db4d222e78410e1098ef6789a1eb79a5ee269fbe31db9f32c3a11550e0de8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/AuthVerificationForm.a9208b1c.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d6543ca375a122c0fd994904eda05e73"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lu87osTGbLxZ0OAbcqTmju3%2BqGTqVXaPRk7x%2BkD30ZnUEmJq%2B0etLwmIBDDcjO5g5DbfSNFM3jP39S6Lh6TJhHN%2BNsiS939W6tjxpDgFgJldOz3JxyS1FItV29QJaWD8Zl%2Fx7dsDRrJrNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fcf91856b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.ed84cca0.js

172.66.44.94

200 OK

36 kB

URL GET HTTP/3
office-client.pages.dev/js/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.ed84cca0.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (36346), with no line terminators
Size
36 kB (36346 bytes)
Hash
f2731ca98b2cad7c9aa8511fa4b43579
78baf71409ec71a62927b1618afd9af006bf8a4e
a6f2f3b959dca644cf9d812119e5704710c609157890b9e67d821343de959097

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/AuthVerificationForm~SMSVerificationForm~mobileLoginForm.ed84cca0.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"36acf9fd7b940d022baf25ca0af206ec"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ckP5vXTfUyqw4TvXJpVTC%2FDh%2FjfQQtWNTmIRoeRc3ZiNigyFvjxXdPH%2FPOivJHjroIFJ8SnRWyO1f%2Fb%2B0Zk96HLE87atcd2kPtLFlooYdYBAsGETl3PN0TUlFvUXDgvsnb8zhOcVvLWug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fd79d556b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/SMSVerificationForm~mobileLoginForm.2484a706.js

172.66.44.94

200 OK

20 kB

URL GET HTTP/3
office-client.pages.dev/js/SMSVerificationForm~mobileLoginForm.2484a706.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (19606)
Size
20 kB (19679 bytes)
Hash
10218eaf1ce780d12c1b4402ded0b979
d7ca4a6f92480e4bc3ba7e7e6d3ecc1a9fb56a8f
d705c1d2ab3d68fefdd50fbd3ba5e4993a290459fab96b73fe04f525deb6e19a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/SMSVerificationForm~mobileLoginForm.2484a706.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"08ad70a4d4b06bee83037150e4ff76ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2odlugB3f%2F7VidiXi1e4nsjQkS6oKpRMOa62DBq3Fvm7hdGXvgKo8vo3CJg8%2BFb%2F5p9z0ofklsjob6T%2BA8zlbRitNZbw74rsCqQB3Az8pAPNZLQck6IS70QHhyqosCwa2fPF%2F%2B3NRBNRVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fdaa0d56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/js/AuthVerificationForm.da2c1078.js

172.66.44.94

200 OK

4.0 kB

URL GET HTTP/3
office-client.pages.dev/js/AuthVerificationForm.da2c1078.js
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
JavaScript source, ASCII text, with very long lines (4279), with no line terminators
Size
4.0 kB (4018 bytes)
Hash
ab6bdf4d5174822ee21a78144ebf6cae
3bdfa095ddc375705ea6932889a8de9f076e2342
c9ecebb83fec7f9d0e69c15eac76deda7abc4b3724cd33f4129c560f6ad70865

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /js/AuthVerificationForm.da2c1078.js HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"9c269c431dda68bd7d7c0c49abc3fb3a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCS36dy44MKpqtJUTo7KVJkoMpgYgceMO%2Bk7FgGzGOzqYINEGmcQCvswwJ%2FNftw8f9P%2FcCk0x3IuMt3%2BL0j2HhtycH9%2BzzN06ZXZrYtfZ8Gjlwk0xslheQpniUaMY2jTvHiH%2BQOea%2BvB7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fd092b56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

office-client.pages.dev/robots.txt

172.66.44.94

200 OK

1.7 kB

URL User Request GET HTTP/2
office-client.pages.dev/robots.txt
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
HTML document, ASCII text, with very long lines (1719), with no line terminators
Size
1.7 kB (1713 bytes)
Hash
9fe8c178d36545dda20ef6ebce02abaa
788f4ad7fbdf55abb661cd8fdc5546038d5cca2a
ae1f8f2031eeb11d471204996cd831c622beeacb77f3c1b0c97d592884653c7a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /robots.txt HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 17:20:06 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e45aec985340c3b2d9c2f66e9f3fbac4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=INrIlYVTQQRGKlcjkXaAU0sTbePezMV%2BeqQM2%2F3L9vLrT%2F1Oj9QUi3jDKnCjnlRTVk8m5YsTS2%2F%2BukRHj9Ka3TrIs0iNF3quXZJnsFarKtEWCv0OoyJi%2BkgxA8ydfQ0ADv0NAsEG%2FSBt8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949f68dfc0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

office-client.pages.dev/css/SMSVerificationForm.a9208b1c.css

172.66.44.94

200 OK

69 B

URL GET HTTP/3
office-client.pages.dev/css/SMSVerificationForm.a9208b1c.css
IP
172.66.44.94:443
ASN
#13335 CLOUDFLARENET

Requested by
https://office-client.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectoffice-client.pages.dev
Fingerprint9C:FE:28:12:76:08:A5:65:8B:B1:F7:76:38:B2:47:94:47:8A:A9:19
ValidityWed, 13 Mar 2024 03:42:56 GMT - Tue, 11 Jun 2024 03:42:55 GMT

File type
ASCII text, with no line terminators
Size
69 B (69 bytes)
Hash
e7e0fefce4be886c08bb80d8f4be8c6c
c727d76e587df06612b7e33ab79e2919acc0c140
947db4d222e78410e1098ef6789a1eb79a5ee269fbe31db9f32c3a11550e0de8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /css/SMSVerificationForm.a9208b1c.css HTTP/1.1
Host: office-client.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://office-client.pages.dev/robots.txt
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:20:07 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d6543ca375a122c0fd994904eda05e73"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0o9t21%2Fz5JM4GUw0cHw1mjEizfudNx804GuVKEfNdP%2FCCqgOk6zyuG7dYz8t9gCer0mXlUn8a5%2Bk6jUTFClOFkYsZwfaa33hbVv1RVZvNU7A48O6N4T1EqTCaVwc%2B7zEn6IklBs9L0yFPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b949fcf91c56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3