| pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html |  104.18.3.35 | 200 OK | 110 kB |
URL User Request GET HTTP/1.1pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html IP104.18.3.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (64651), with CRLF line terminators Size110 kB (110089 bytes) Hash2e6d3bbf81604abebf025bfcd57a7ee7 2d54303d2a23cd9387518110094e9d1219b98eda ae4332a3247fc82d1f20a3ff47d707d68b04f6ae3fb4f2dd77813034039eef45
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | urlquery | phishing | Phishing - Microsoft Outlook | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /cor.html HTTP/1.1
Host: pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 05:35:07 GMT
Content-Type: text/html
Content-Length: 110089
Connection: keep-alive
Accept-Ranges: bytes
ETag: "2e6d3bbf81604abebf025bfcd57a7ee7"
Last-Modified: Wed, 12 Jul 2023 14:42:52 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875a0cc3aecf92f7-CPH
|
|
| code.jquery.com/jquery-3.1.1.min.js |  151.101.2.137 | 200 OK | 30 kB |
URL GET HTTP/2code.jquery.com/jquery-3.1.1.min.js IP151.101.2.137:443
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 05:35:07 GMT
age: 18531507
x-served-by: cache-lga21947-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 101643
x-timer: S1713332108.553369,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
|
|
| smtpjs.com/v3/smtp.js |  109.169.71.112 | 200 OK | 871 B |
IP109.169.71.112:443 ASN#20860 Iomart Cloud Services Limited
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerLet's Encrypt Subjectsmtpjs.com FingerprintEC:83:1D:D8:A2:64:CE:2A:CC:AC:62:79:7D:42:09:D5:21:4E:8D:05 ValidityTue, 09 Apr 2024 02:31:24 GMT - Mon, 08 Jul 2024 02:31:23 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (841), with CRLF line terminators Hash3834e1b9e65ca954b7479464ea1e5118 437df45dbf59c3a3414236f44e3bcd5045bfe314 fc33c6b2c79aafa930e841962ae3c25bf8f56cbc20ec48fc2b0ddd0aa6ee23b6
GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 15 Mar 2024 10:08:42 GMT
accept-ranges: bytes
etag: "b65c4ac2c076da1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Wed, 17 Apr 2024 05:35:06 GMT
content-length: 871
X-Firefox-Spdy: h2
|
|
| login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 |  20.190.181.5 | 200 OK | 11 kB |
URL GET HTTP/2login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 IP20.190.181.5:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectstamp2.login.microsoftonline.com Fingerprint84:2D:29:9C:5B:D1:CB:50:04:C3:0E:28:1F:1C:78:96:64:FA:B8:64 ValiditySat, 16 Mar 2024 00:00:00 GMT - Sun, 16 Mar 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (10880), with CRLF, LF line terminators Hashf31e5b58e8a43205a55b73e57ac33e2c b35f9e33479227a001f07b0423120ff62cf3595d 94726a4e4f665c7ceafe32e17fb6695393a8f49d9a802891efbe98f0e2ffbb94
GET /logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
x-dns-prefetch-control: on
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 1e9545df-cb84-412f-8cc7-4edbc9807700
x-ms-ests-server: 2.1.17789.7 - FRC ProdSlices
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 0
set-cookie: SignInStateCookie=CAgABFgIAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9us5NjBex2dY858q3wPh_eR-2i5eLVx0ek5W8i3n8JPmPMJWj-G3hDu99cm_pboaj2Huks57RzLA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9gaIgb-tx4PF30h_DN1dh1fSMUKMd56r8OxWt_Fd9Ig6Sr0gIy9wVXuDBd1mEY5pgagfgwA6QWJA; domain=.login.microsoftonline.com; expires=Tue, 16-Jul-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P916w1yoxAyJzBPxefLW0rxHiU7ik3-A6ImCj6sqCh6JyKNY5wBuFE8V3ft6ML7CLJCHQGOfvQxCA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8NpAog8mUF4jMw3o3zXkv5BLT7cg-4E9k4cew-dSM9QD11_aaqEPGYhFJc0sAaCCOUA8Sp9VwiqMzZnyk9luhwRG_MEMQM5GKqBtvhBLKB6cgAA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AkCT3RL7NmxIrYXi5eiqYzA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd86XXrnBnL1ergcmxOeufOcxQIzWtv_PBjRuGB6k26373rXw7yMN9zKaE3N-36J0rvM4Do_ikBaezkJFjB35dqFmQvk30cPCAW5dt128sXPF_KdUCmcDzARYP02o8Pvb8_1lmpSmI1kDNJVFmXRLrGPaRkB45gv3dgpaWvuaxqaPMgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
date: Wed, 17 Apr 2024 05:35:07 GMT
content-length: 11156
X-Firefox-Spdy: h2
|
|
| api.ipify.org/?format=jsonp&callback=getPublic | 172.67.74.152 | 200 OK | 33 B |
URL GET HTTP/2api.ipify.org/?format=jsonp&callback=getPublic IP172.67.74.152:443
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerGoogle Trust Services LLC Subjectipify.org FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7 ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT
File typeASCII text, with no line terminators Hashb1fdb43145cf7c3f6f2a1370889232f1 19cd287ba1ffae5908cf8d53d13abc302dac6f9c 9a751b74811a7c42413bc5109600706395ac8a8c057f7e6a55fc45b7ea41b191
GET /?format=jsonp&callback=getPublic HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:07 GMT
content-type: application/javascript
content-length: 33
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 875a0cc80e356442-LHR
X-Firefox-Spdy: h2
|
|
| www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F | 13.107.6.156 | 302 Found | 0 B |
URL GET HTTP/2www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F IP13.107.6.156:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerMicrosoft Corporation Subjectportal.office.com FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0
vary: Accept-Encoding
set-cookie: OH.SID=ebf15d17-aab0-43b9-a52c-75a1af2e46f9; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Wed, 17 Apr 2024 13:35:07 GMT; path=/; secure; samesite=none; httponly
OH.FLID=c3853fed-877d-4c51-9840-8f320fe19a5b; expires=Thu, 17 Apr 2025 05:35:07 GMT; path=/; secure; samesite=none; httponly
MUID=183CA9F328426AB525B7BD97296E6B52; path=/; secure; expires=Mon, 12-May-2025 05:35:07 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B7527D25DA8448D2B3DCB9CA0C974426 Ref B: SVG20EDGE0213 Ref C: 2024-04-17T05:35:07Z
date: Wed, 17 Apr 2024 05:35:06 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| www.office.com/estslogout?ru=/ | 13.107.6.156 | 302 Found | 0 B |
URL GET HTTP/2www.office.com/estslogout?ru=/ IP13.107.6.156:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerMicrosoft Corporation Subjectportal.office.com FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?ru=/ HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0
vary: Accept-Encoding
set-cookie: OH.SID=1cb4087c-f20d-4d6b-b9f1-e9a139a1ecd0; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Wed, 17 Apr 2024 13:35:07 GMT; path=/; secure; samesite=none; httponly
OH.FLID=24b02a76-d274-449e-a989-02bc81b3e41d; expires=Thu, 17 Apr 2025 05:35:07 GMT; path=/; secure; samesite=none; httponly
MUID=2C253FE6121A657C292A2B8213366441; path=/; secure; expires=Mon, 12-May-2025 05:35:07 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B50369FE9E9D45459396367B10FD8C7E Ref B: SVG20EDGE0213 Ref C: 2024-04-17T05:35:07Z
date: Wed, 17 Apr 2024 05:35:06 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 | 20.190.181.5 | 200 OK | 11 kB |
URL GET HTTP/2login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 IP20.190.181.5:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectstamp2.login.microsoftonline.com Fingerprint84:2D:29:9C:5B:D1:CB:50:04:C3:0E:28:1F:1C:78:96:64:FA:B8:64 ValiditySat, 16 Mar 2024 00:00:00 GMT - Sun, 16 Mar 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (11070), with CRLF, LF line terminators Hash02e4dcc9c922352f8d3adc115303b3a7 f86bd36e21d587935b64bcb8a49fc766b3215775 c9261edef14b6e33a3f15f0269bf243555ccbdce016a5df5996815c2f404a9c6
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABFgIAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9us5NjBex2dY858q3wPh_eR-2i5eLVx0ek5W8i3n8JPmPMJWj-G3hDu99cm_pboaj2Huks57RzLA; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9gaIgb-tx4PF30h_DN1dh1fSMUKMd56r8OxWt_Fd9Ig6Sr0gIy9wVXuDBd1mEY5pgagfgwA6QWJA; ESTSAUTH=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P916w1yoxAyJzBPxefLW0rxHiU7ik3-A6ImCj6sqCh6JyKNY5wBuFE8V3ft6ML7CLJCHQGOfvQxCA; ESTSAUTHLIGHT=+; buid=AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8NpAog8mUF4jMw3o3zXkv5BLT7cg-4E9k4cew-dSM9QD11_aaqEPGYhFJc0sAaCCOUA8Sp9VwiqMzZnyk9luhwRG_MEMQM5GKqBtvhBLKB6cgAA; fpc=AkCT3RL7NmxIrYXi5eiqYzA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd86XXrnBnL1ergcmxOeufOcxQIzWtv_PBjRuGB6k26373rXw7yMN9zKaE3N-36J0rvM4Do_ikBaezkJFjB35dqFmQvk30cPCAW5dt128sXPF_KdUCmcDzARYP02o8Pvb8_1lmpSmI1kDNJVFmXRLrGPaRkB45gv3dgpaWvuaxqaPMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
x-dns-prefetch-control: on
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 93d60314-53d8-49af-807a-d92623706200
x-ms-ests-server: 2.1.17789.7 - NEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 0
set-cookie: SignInStateCookie=CAgABFgIAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P_Eojt9jOMSFQtgHN4YFer7u6X1syLq4XEjj-gKjikxr5Wbt_l5jBtFlM3Shgdt8AY0IXpTA7wuSA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9HuYxPFPl4FaL_oUZFVue-ElgaGA1idWsksVa_15mj8CsFNQ20xLlFoHT5opYdIOMEPHCAc7dEUw; domain=.login.microsoftonline.com; expires=Tue, 16-Jul-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9be-Y9-V7KArt0bFiDGXCz8bW-6e9cg7G6qHBVLZ6oAqDW8GHxnHXcHmhuItxyEEOfk4ZjVYmQ6Q; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8Lqn3ExHysOTw1KUaoNX_0goEo8LszZAf9XLNhWUej_pTdvCviM124JTc46WHzCG_lc3TD7u0537hqtXNBKHkAC-v9wGZHFAc3syIktFfJTUgAA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AkCT3RL7NmxIrYXi5eiqYzA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
date: Wed, 17 Apr 2024 05:35:07 GMT
content-length: 11301
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png | 152.199.23.37 | 200 OK | 1.1 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typePNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced Hashed9c9eb0dce17d752bedea6b5acda6d9 eca56c4904354eed5da0debcd6bd66856ab4784d f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998900
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Wed, 17 Apr 2024 05:35:07 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 292105e8-b01e-0074-465a-7e042e000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css | 152.199.23.37 | 200 OK | 20 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (61177) Hashd62b4edeb512b07abef4688e27ecdde3 981a7825da5e29938ab6fe0cbfe2db622f7b8333 4b01a0a34ce8ed4bc8a8713be0442d49da6a756236b7b4424622ca3dee820f41
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998932
cache-control: public, max-age=31536000
content-md5: kqhA3D0Xczna4D/t8ioitQ==
content-type: text/css
date: Wed, 17 Apr 2024 05:35:07 GMT
etag: 0x8DC070858CA028D
last-modified: Wed, 27 Dec 2023 18:19:21 GMT
server: ECAcc (ska/F6B1)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c9a12eea-501e-00aa-105a-7e9255000000
x-ms-version: 2009-09-19
content-length: 20314
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js | 152.199.23.37 | 200 OK | 40 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash75cf78d0e38c65a538ad253ca9e48dbe bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6 df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998921
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:07 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e5841306-d01e-001a-405a-7ee411000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js | 152.199.23.37 | 200 OK | 45 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (778) Hashbe630e623d7ee30720abfe258d7e77f9 28e1655eac90fc1f5a93f16366739ddfc9f04638 87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998881
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:07 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4dac136d-301e-00f8-535a-7ea762000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2
|
|
| login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 | 20.190.181.5 | 200 OK | 11 kB |
URL GET HTTP/2login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 IP20.190.181.5:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectstamp2.login.microsoftonline.com Fingerprint84:2D:29:9C:5B:D1:CB:50:04:C3:0E:28:1F:1C:78:96:64:FA:B8:64 ValiditySat, 16 Mar 2024 00:00:00 GMT - Sun, 16 Mar 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (11070), with CRLF, LF line terminators Hashd38a1d7e217bc3582ae204544c2f8b8c b73685cec8813c48601bafac65a81510bbb168ef f072d8571f4fb16744eb471ef9b393cf4567fafb8f35d164968d248341a7b515
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABFgIAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9us5NjBex2dY858q3wPh_eR-2i5eLVx0ek5W8i3n8JPmPMJWj-G3hDu99cm_pboaj2Huks57RzLA; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9gaIgb-tx4PF30h_DN1dh1fSMUKMd56r8OxWt_Fd9Ig6Sr0gIy9wVXuDBd1mEY5pgagfgwA6QWJA; ESTSAUTH=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P916w1yoxAyJzBPxefLW0rxHiU7ik3-A6ImCj6sqCh6JyKNY5wBuFE8V3ft6ML7CLJCHQGOfvQxCA; ESTSAUTHLIGHT=+; buid=AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8NpAog8mUF4jMw3o3zXkv5BLT7cg-4E9k4cew-dSM9QD11_aaqEPGYhFJc0sAaCCOUA8Sp9VwiqMzZnyk9luhwRG_MEMQM5GKqBtvhBLKB6cgAA; fpc=AkCT3RL7NmxIrYXi5eiqYzA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd86XXrnBnL1ergcmxOeufOcxQIzWtv_PBjRuGB6k26373rXw7yMN9zKaE3N-36J0rvM4Do_ikBaezkJFjB35dqFmQvk30cPCAW5dt128sXPF_KdUCmcDzARYP02o8Pvb8_1lmpSmI1kDNJVFmXRLrGPaRkB45gv3dgpaWvuaxqaPMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
x-dns-prefetch-control: on
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 4c8859de-5897-41f2-b63e-3e5efc7e1000
x-ms-ests-server: 2.1.17846.6 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 0
set-cookie: SignInStateCookie=CAgABFgIAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P84qx7yl5EMoCO1MVItXpGrcEcrx1oPr1BpsUHmJoa_MYgWnm6Iodl4UjALwE75Uo-DzOGmJPJs4g; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 17-Apr-2034 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P_Q5bMSFmi1ntA2xAEsR0emJOASVr12rcpiUAXs4GkwbU_7-gXQF60TUZI1HF-GKPnpa6Z7spU0jQ; domain=.login.microsoftonline.com; expires=Tue, 16-Jul-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABFwQAAADnfolhJpSnRYB1SVj-Hgd8AgDs_wUA9P9SnzPeOrJYM0QfKqAJuLu7s0jyT3bX9QmHbf3iptL19TVUCZ8-WgAY0P8fs33Mxu4Bl-b7cbbx0A; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8bGob4EDtvI8eHWNlsh-qp9MXFw6kt41BY6BAnPlBhHVSvDX25okVANacxXjC8-musOsb71Ztq-_hyLMAOKcNVohz0aiJBIoodw4f2Hqvy0UgAA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AkCT3RL7NmxIrYXi5eiqYzA; expires=Fri, 17-May-2024 05:35:07 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
date: Wed, 17 Apr 2024 05:35:07 GMT
content-length: 11300
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css | 152.199.23.37 | 200 OK | 20 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (61177) Hashd62b4edeb512b07abef4688e27ecdde3 981a7825da5e29938ab6fe0cbfe2db622f7b8333 4b01a0a34ce8ed4bc8a8713be0442d49da6a756236b7b4424622ca3dee820f41
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998933
cache-control: public, max-age=31536000
content-md5: kqhA3D0Xczna4D/t8ioitQ==
content-type: text/css
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8DC070858CA028D
last-modified: Wed, 27 Dec 2023 18:19:21 GMT
server: ECAcc (ska/F6B1)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c9a12eea-501e-00aa-105a-7e9255000000
x-ms-version: 2009-09-19
content-length: 20314
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js | 152.199.23.37 | 200 OK | 40 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash75cf78d0e38c65a538ad253ca9e48dbe bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6 df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998922
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e5841306-d01e-001a-405a-7ee411000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js | 152.199.23.37 | 200 OK | 45 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (778) Hashbe630e623d7ee30720abfe258d7e77f9 28e1655eac90fc1f5a93f16366739ddfc9f04638 87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998882
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4dac136d-301e-00f8-535a-7ea762000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js | 152.199.23.37 | 200 OK | 40 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=ASKsZOsNqs73r8CZN7KcYLb8of53QizbvLMf9Ui0TbzeVe5jgzAS1Af9VsarrRbq1PmVNiYcU4wrSfJNqiaJ36pa2PeAv5eMOnspz7o5txKPl4IhqPy3-L1woW11yNp_&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash75cf78d0e38c65a538ad253ca9e48dbe bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6 df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998922
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e5841306-d01e-001a-405a-7ee411000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js | 152.199.23.37 | 200 OK | 45 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (778) Hashbe630e623d7ee30720abfe258d7e77f9 28e1655eac90fc1f5a93f16366739ddfc9f04638 87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998882
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4dac136d-301e-00f8-535a-7ea762000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png | 152.199.23.37 | 200 OK | 1.1 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typePNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced Hashed9c9eb0dce17d752bedea6b5acda6d9 eca56c4904354eed5da0debcd6bd66856ab4784d f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998901
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 292105e8-b01e-0074-465a-7e042e000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | 13.107.213.53 | 200 OK | 17 kB |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:08 GMT
content-type: image/x-icon
content-length: 17174
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-ms-request-id: 0aebf961-901e-0067-5f5f-9076b2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240417T053508Z-16c87f56bf7v4fsdbqq57ywnqs0000000atg000000005y35
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
x-cache-info: L1_T2
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png | 152.199.23.37 | 200 OK | 1.1 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png IP152.199.23.37:443
Requested byhttps://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=oVSumm-drXchWchYB7KwcLIdvf7iKFnhoIbDcuKIJ9A7mdLixZMTVkd_9qTvI6umBgCLW9xWi6KEqevfwEkchKILB4Pk6ba59hRLuz22uOl1eHFxoLLeWADE7xQm0UAf&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typePNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced Hashed9c9eb0dce17d752bedea6b5acda6d9 eca56c4904354eed5da0debcd6bd66856ab4784d f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1998901
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Wed, 17 Apr 2024 05:35:08 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 292105e8-b01e-0074-465a-7e042e000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg | 13.107.213.53 | 200 OK | 673 B |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:08 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Thu, 13 Feb 2020 02:05:12 GMT
etag: 0x8D7B0292911C366
x-ms-request-id: bf9086c5-001e-0076-5889-90ed92000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240417T053507Z-16c87f56bf7v4fsdbqq57ywnqs0000000atg000000005y2t
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png | 13.107.213.53 | 200 OK | 1.1 kB |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typePNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced Hashed9c9eb0dce17d752bedea6b5acda6d9 eca56c4904354eed5da0debcd6bd66856ab4784d f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:08 GMT
content-type: image/png
content-length: 1057
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D641015620C409
x-ms-request-id: 764f1711-b01e-0049-5489-90459c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240417T053507Z-16c87f56bf7v4fsdbqq57ywnqs0000000atg000000005y2v
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png | 13.107.213.53 | 200 OK | 240 B |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced Hash7cc096da6aa2dba3f81fcc1c8262157c a50776316f0220ed7cd7882a68c742a8861c999d ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:08 GMT
content-type: image/png
content-length: 240
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:10 GMT
etag: 0x8D64101494D74DC
x-ms-request-id: 0ef0bea2-a01e-0014-2e89-90f9b4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240417T053507Z-16c87f56bf7v4fsdbqq57ywnqs0000000atg000000005y2u
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png | 13.107.213.53 | 200 OK | 207 B |
URL GET HTTP/2aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/cor.html CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash0ad43084800fd8b50a2576b5173746fe 97c08e6062ff37f6e7a6c65e94d693ccc9ccd443 2c03ee38a4eba6a047c3a5bacb3eb461efe14be8acd46ae772350a4dea2f0175
GET /ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-06239b48eabe419abaeabc71a5b93e7b.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:35:08 GMT
content-type: image/png
content-length: 207
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D6410151EBB082
x-ms-request-id: 8f245493-e01e-0068-0189-90ffad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240417T053507Z-16c87f56bf7v4fsdbqq57ywnqs0000000atg000000005y2w
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|