pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
200 OK 21 kB URL User Request GET HTTP/1.1 pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
IP
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (64651), with CRLF line terminators
Hash ff4bb96a3748ff47994176473965f39b
01156a5f9f21e2a2fad3c58b6a50ad1358d217bb
f62cabec4957a6a16cc0053e588f394138b825ea2029a1ce5841b2c7122a0c56
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
OpenPhish phishing Outlook
PhishTank phishing Other
GET /ch.html HTTP/1.1
Host: pub-d89e3188311c46f49978b9555d4c9596.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 02:15:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"ff4bb96a3748ff47994176473965f39b"
Last-Modified: Wed, 18 Oct 2023 09:56:38 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82cf1aed3d73568f-OSL
Content-Encoding: gzip
code.jquery.com/jquery-3.1.1.min.js
200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.1.1.min.js
IP
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32030)
Hash e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:15:48 GMT
age: 6337147
x-served-by: cache-lga21947-LGA, cache-bma1665-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 139572
x-timer: S1701137749.672700,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F
302 Found 0 B URL GET HTTP/2 www.office.com/estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
Fingerprint13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4
ValidityWed, 13 Sep 2023 22:45:31 GMT - Sat, 07 Sep 2024 22:45:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
vary: Accept-Encoding
set-cookie: OH.SID=8d1a68cd-535e-4e2d-b4fa-8dd7b25d1b12; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Tue, 28 Nov 2023 10:15:48 GMT; path=/; secure; samesite=none; httponly
OH.FLID=8ad935d7-a16c-43d2-be85-9c54d740905e; expires=Thu, 28 Nov 2024 02:15:48 GMT; path=/; secure; samesite=none; httponly
MUID=0E70F9BD8411610F3A35EA6A853D60C5; path=/; secure; expires=Sun, 22-Dec-2024 02:15:48 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 41E596D3B9204F9587E7DCB5AA5D0DD6 Ref B: SVG20EDGE0222 Ref C: 2023-11-28T02:15:48Z
date: Tue, 28 Nov 2023 02:15:48 GMT
content-length: 0
X-Firefox-Spdy: h2
www.office.com/estslogout?ru=/
302 Found 0 B URL GET HTTP/2 www.office.com/estslogout?ru=/
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
Fingerprint13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4
ValidityWed, 13 Sep 2023 22:45:31 GMT - Sat, 07 Sep 2024 22:45:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /estslogout?ru=/ HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
vary: Accept-Encoding
set-cookie: OH.SID=1b681a74-26ea-4f76-ad83-9ba70a894dfe; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Tue, 28 Nov 2023 10:15:48 GMT; path=/; secure; samesite=none; httponly
OH.FLID=06e043c3-9738-42f4-8b34-f01d81edecb8; expires=Thu, 28 Nov 2024 02:15:48 GMT; path=/; secure; samesite=none; httponly
MUID=26CDF4382E4F6D740C0AE7EF2F636CF2; path=/; secure; expires=Sun, 22-Dec-2024 02:15:48 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DA7397A247A14999AD7D803BF53FF976 Ref B: SVG20EDGE0222 Ref C: 2023-11-28T02:15:48Z
date: Tue, 28 Nov 2023 02:15:48 GMT
content-length: 0
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
200 OK 673 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators
Hash bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Thu, 13 Feb 2020 02:05:12 GMT
etag: 0x8D7B0292911C366
x-cache: TCP_HIT
x-ms-request-id: f3b9c700-801e-000b-7e94-181264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kR9WZQAAAADqKyfIGg5MSLesig8o25qiQU1TMDRFREdFMTkwOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VE1lZQAAAADFqA+YgZhvQJF49yVtd4ufU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
200 OK 240 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc096da6aa2dba3f81fcc1c8262157c
a50776316f0220ed7cd7882a68c742a8861c999d
ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 240
content-type: image/png
content-md5: fMCW2mqi26P4H8wcgmIVfA==
last-modified: Fri, 02 Nov 2018 20:25:10 GMT
etag: 0x8D64101494D74DC
x-cache: TCP_HIT
x-ms-request-id: c197bc72-101e-001a-4c1a-1e8944000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0ZIhfZQAAAABHjq646f+aQJXtyvuqOypzQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VE1lZQAAAABUpnnDbf1kToGcluKVjBq8U1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D641015620C409
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 81453abf-201e-0045-5097-1f6368000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0VE1lZQAAAADGizKlGCoPRoCZDM8II1pRQU1TMDRFREdFMTgxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VE1lZQAAAAC/dwP7IyCZTLyRJwFT4EUmU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png
200 OK 207 B URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ad43084800fd8b50a2576b5173746fe
97c08e6062ff37f6e7a6c65e94d693ccc9ccd443
2c03ee38a4eba6a047c3a5bacb3eb461efe14be8acd46ae772350a4dea2f0175
GET /ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 207
content-type: image/png
content-md5: CtQwhIAP2LUKJXa1FzdG/g==
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D6410151EBB082
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 36395859-e01e-0075-249d-1f4279000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0VE1lZQAAAACMXx0JwgXhTYTheTDQCJIBQU1TMDRFREdFMTkwNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VE1lZQAAAACW6Ox3sB+9TIQzvN4ClUKUU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10875), with CRLF, LF line terminators
Hash 5a78e86d405f37b0e5c0a75c2b30688d
de3a251dab9d7ab460073c021df301af101d6d6e
5fce0acde01b3d6c62f3ac5b3d1be00a8055919330aa0b93c8d50f7b18fc4164
GET /logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 68cda895-11a5-4159-ada1-9849a0ff5701
x-ms-ests-server: 2.1.16729.8 - SEC ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_Lb9H1dB3018eKw5QNpNdYAS58Mc_L-H1Uoia8du-YJ688UoPP3nfXC6S3KIpIoerqlrp8Obt3WA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-h2A6M8JN-K6zyqS3MQvYKj9WKsxMT0wpJzQIvXSi-i7Y7jXK5xsd8dvH_2R7dyKWC7-uS9VuZxw; domain=.login.microsoftonline.com; expires=Mon, 26-Feb-2024 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_fvNQi2WaAiisNpgoqWCjFr229UPEylLe1ENryH0dOtsJtVash7nRSX1ddcTemzEC-AWISPkqB4A; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-KEcw1YGcaB4W_xp9dEI7i6NAjrISAfQG3ESwaQKcTF6xtn02mcrzQ2zi5IrNy-JE8C8FB59CD_G45WEOjQIWQDUteNMDckg8lbliZbFvNTggAA; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AqN6iJ3YyI1HjzYEvfueb-A; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-nQxUOszB1JCamMyUAjjhrue0fc7s4fiB8c0pFoY0yCcOsrW_PY-x9kAihLRcLneB_B222wyCgfJ8uOoyGRGA3ddB4xdyeGg4m2JT_SJXsL-I4T6N7fx0MNUJi8KQ4jAE789DyXlQxP4i7o8Gqkk4fL2vjI9UvnLZ_U_SE_mpcsEgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 28 Nov 2023 02:15:48 GMT
Content-Length: 11159
smtpjs.com/v3/smtp.js
200 OK 871 B IP
ASN #20860 Iomart Cloud Services Limited
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerLet's Encrypt
Subjectsmtpjs.com
Fingerprint80:11:F5:EE:07:C3:FF:C6:7A:51:CC:25:CE:9E:03:8D:A4:6E:65:81
ValiditySat, 11 Nov 2023 02:15:38 GMT - Fri, 09 Feb 2024 02:15:37 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (841), with CRLF line terminators
Hash 3834e1b9e65ca954b7479464ea1e5118
437df45dbf59c3a3414236f44e3bcd5045bfe314
fc33c6b2c79aafa930e841962ae3c25bf8f56cbc20ec48fc2b0ddd0aa6ee23b6
GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 10 Nov 2020 17:17:51 GMT
accept-ranges: bytes
etag: "162f436b85b7d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Tue, 28 Nov 2023 02:15:48 GMT
content-length: 871
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11088), with CRLF, LF line terminators
Hash 7f8bbf47c63f725f108de94c51d4ba2d
2a48d14ae65586a730b3b8ab3e8b7281a0cf28e9
bbb7ed63f397a82507b226db2e3254c1832c320b74875fd3a7f92d6b681a06f6
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: dd7bb58c-2922-4c16-aabb-09524a3c2d02
x-ms-ests-server: 2.1.16729.8 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9msKYIKGGovDHl291tf-YDAjYwkrnaSxttJsPEFlw8resUV2KxxTN9kJfAXq7rtxAjzhBAtF41aw; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-JuMELmR6I647g4eDSGW6YYgyWOZA4hdVwD1INGgjZotuuBmvZyVRvF0i2N0UX2VSpbnHdTTshxA; domain=.login.microsoftonline.com; expires=Mon, 26-Feb-2024 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_nTQxFw3Kj5empWU88CpXjL73corp6QEYr0JNKnu4CXnczoD7ZAwfOgdVcFkLyo0iFT6bAqUywVQ; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-6U8FQ1SBdwuEpNX9yErjHO3qjBn2v8MqrAyuEL3sHDO3afZg2_QDu9hv4zaWZFBDrUFtuP33KCmN7j6Uxt4AdyJLA5AJCT1yZ7xpY1Z-JWEgAA; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AubGBJDxdQhOrL54mK9aPOM; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-wO2UWBe7Z478PYk7JO3dXtDmxKmO8sBd7OuoAIza2pwd-UmOm-wM6w1xRdStrCEjC1V59mSihvjfrY5vP6wJI2NBe95sFdGB-z6s6Tj2QYkxYcylyK7pFet-7tn17v_nioinSvklE7Icdf97CJLsR2DkU4YsYHLlR9uQB2j74kogAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 28 Nov 2023 02:15:49 GMT
Content-Length: 11307
login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
200 OK 11 kB URL GET HTTP/1.1 login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11066), with CRLF, LF line terminators
Hash 9b0ace5c6336884dd0020f0152069fb9
b839bec8e7893c03977cf5d8e327824111f8dbcf
2022c2346b18316692394e1966396036f8b314532e56cf1fc4c8b3861ab5e6fb
GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 979aae52-f747-4089-b563-3798ce720e01
x-ms-ests-server: 2.1.16729.8 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_SN7j3VOiAP2wvBuO0JRNVYDjbaHGdIU0rVHGagRTEW-SZmHhwBI7_Ayq51oBE5oWpZTKBXdQIOA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Mon, 28-Nov-2033 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_l3mXE-dU-JM9Vzf7Hmqe2lGarUU3mdy78y9wRZRcJ9amr8oaFegU9_VbDcBLV0oDYstcj6Gd5Hw; domain=.login.microsoftonline.com; expires=Mon, 26-Feb-2024 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9Z-6EQvqFfOdedYgIMaYxR5OEUjp3ialNGT7wQxyFSJTru2u0Cu2vMYHv-D0gxot1TgBZUOwZKUA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-3fipAyBYQYwz9uHgFVreVhQUa_87KXfukEC3ETlHLEfJ8R81XzutRo5vP9bULTGQh9XvRiGNeX7tDTkOsashN6MOUgliEL69Q9-ZTk2-wLQgAA; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=As2PatnlIC1BnSWMDybbJoE; expires=Thu, 28-Dec-2023 02:15:49 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-YuYuB_36ioyobDBRDARqAzmWz3azavrVktmycCucsDqEgnLCRDWn73runUbYvZbT8_gkFhL4DFvBzUTS9p5VzpqNrQj1BdlBf4FP2kWw6PshGjJJaP_mdNDRItR1uIV-K_s4NLjE06c-xjSvwmeaVK9eBOBqKFk6RjDZV7Y3_8EgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 28 Nov 2023 02:15:49 GMT
Content-Length: 11307
api.ipify.org/?format=jsonp&callback=getPublic
200 OK 33 B URL GET HTTP/1.1 api.ipify.org/?format=jsonp&callback=getPublic
IP
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerSectigo Limited
Subject*.ipify.org
FingerprintF4:76:2D:2C:65:D1:15:BE:19:A4:C5:E0:8D:EB:89:1A:B6:75:4A:54
ValidityTue, 07 Feb 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b1fdb43145cf7c3f6f2a1370889232f1
19cd287ba1ffae5908cf8d53d13abc302dac6f9c
9a751b74811a7c42413bc5109600706395ac8a8c057f7e6a55fc45b7ea41b191
GET /?format=jsonp&callback=getPublic HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.1
Date: Tue, 28 Nov 2023 02:15:49 GMT
Content-Type: application/javascript
Content-Length: 33
Connection: keep-alive
Vary: Origin
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
200 OK 20 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash 2ed8d5b2f2b901e92d03f9068812341a
8470214fc8e246c3910bcb0eae9070d4abe3a389
1a0ea89ae667420caeae29d594d53258e6ed157dab7e8dfe6f154f0054b0cf99
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 20208
content-type: text/css
content-encoding: gzip
content-md5: znAMuOwBXwRYMjVZ8p4wCw==
last-modified: Wed, 06 Sep 2023 21:22:45 GMT
etag: 0x8DBAF1F69A21EAA
x-cache: TCP_HIT
x-ms-request-id: e573cd24-b01e-003c-7395-1fe27b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0lKFjZQAAAAADFMygCIwDTK+UHSRKPqNcQU1TMDRFREdFMTkxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAABNCpnzUDIxSK7oXgOmMP3DU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 560955b7-201e-0011-4dfa-15ac53000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0Hd5WZQAAAACKAWO3eUnmQJhyVQmtnPLaQU1TMDRFREdFMTkyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAACwaO7mJoyOQpeJCcSDPYmDU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash be630e623d7ee30720abfe258d7e77f9
28e1655eac90fc1f5a93f16366739ddfc9f04638
87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 44809
content-type: application/x-javascript
content-encoding: gzip
content-md5: gkCQOa5xTExKUB2dlzn2rA==
last-modified: Thu, 12 Oct 2023 21:23:59 GMT
etag: 0x8DBCB698CEF3B25
x-cache: TCP_HIT
x-ms-request-id: 9bae5662-a01e-005d-2c1e-218b5b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0v0hlZQAAAADqoQwvqkBMRLr3RJym6ZCVQU1TMDRFREdFMTkxNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAAB4+mU2w26iS5bGCd6uUOtKU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F48FD7E08
x-cache: TCP_HIT
x-ms-request-id: 0cbc7180-d01e-006e-666f-20d74c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0YS5lZQAAAADyN/Y5T/cBRZjyW9GVyC3VQU1TMDRFREdFMTkxMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAAC1ER41N2w4T6RR+BnUam9kU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
200 OK 20 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash 2ed8d5b2f2b901e92d03f9068812341a
8470214fc8e246c3910bcb0eae9070d4abe3a389
1a0ea89ae667420caeae29d594d53258e6ed157dab7e8dfe6f154f0054b0cf99
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 7032220
cache-control: public, max-age=31536000
content-md5: znAMuOwBXwRYMjVZ8p4wCw==
content-type: text/css
date: Tue, 28 Nov 2023 02:15:49 GMT
etag: 0x8DBAF1F9F5D8653
last-modified: Wed, 06 Sep 2023 21:24:15 GMT
server: ECAcc (ska/F699)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: a859188b-b01e-00e0-2bab-e14f51000000
x-ms-version: 2009-09-19
content-length: 20208
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 15355303
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Tue, 28 Nov 2023 02:15:49 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 10792541
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Tue, 28 Nov 2023 02:15:49 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msftauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
IP
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wgHWJczhw3-btQL5w5PlxbvlNLYiQNCg7JrZc5zJmRdJS9EziLvcL2N5v14y_ysLquG8F2trqgUh3Wbl1kviXGhGVon_Z54LNyNj8A0pLYqt8T0twLzFsNEK0Zxbhpv&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash be630e623d7ee30720abfe258d7e77f9
28e1655eac90fc1f5a93f16366739ddfc9f04638
87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 3909697
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Tue, 28 Nov 2023 02:15:49 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 12e7e930-401e-009f-1a11-fe344e000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 560955b7-201e-0011-4dfa-15ac53000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0Hd5WZQAAAACKAWO3eUnmQJhyVQmtnPLaQU1TMDRFREdFMTkyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAADSWQXayp9URLb3f7V2cZGpU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
200 OK 45 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (778)
Hash be630e623d7ee30720abfe258d7e77f9
28e1655eac90fc1f5a93f16366739ddfc9f04638
87e738d94f83503f243a4544d7c78a6dadd01c261a6a58fa5085715652029ab9
GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 44809
content-type: application/x-javascript
content-encoding: gzip
content-md5: gkCQOa5xTExKUB2dlzn2rA==
last-modified: Thu, 12 Oct 2023 21:23:59 GMT
etag: 0x8DBCB698CEF3B25
x-cache: TCP_HIT
x-ms-request-id: 9bae5662-a01e-005d-2c1e-218b5b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0v0hlZQAAAADqoQwvqkBMRLr3RJym6ZCVQU1TMDRFREdFMTkxNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAABvKtsTerTjTaMLdASN2p8CU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
200 OK 17 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/ch.html
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 17174
content-type: image/x-icon
content-md5: EuPayFgGHQiAI7K9SOL6lg==
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-cache: TCP_HIT
x-ms-request-id: a6851dbb-a01e-0019-20c9-20f442000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0wcJkZQAAAAApgd+fSxZFQZcXZ7848iDJQU1TMDRFREdFMTkxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAAAx6LWjZwr3T59AlRkX2qYfU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
200 OK 1.1 kB URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=9EykIp6-qBkvH37WOCbl63sEiMzb5Uxpb5HcMKo-4ewNiDfLBfrvjf1d6G9lzmFm5F4FP-Jo3P68HQ1Fuzdwc5x3ocaeOFcpCn9uKm_mGchaYGxV1zyOL-2Rv1C6kNsM&x-client-SKU=ID_NET6_0&x-client-ver=6.30.1.0
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9c9eb0dce17d752bedea6b5acda6d9
eca56c4904354eed5da0debcd6bd66856ab4784d
f664b8138c2da6ec7565500a7cc839da6372614a31dc04c5a2169a26b8d9767c
GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F48FD7E08
x-cache: TCP_HIT
x-ms-request-id: 0cbc7180-d01e-006e-666f-20d74c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0YS5lZQAAAADyN/Y5T/cBRZjyW9GVyC3VQU1TMDRFREdFMTkxMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0VU1lZQAAAACZ5XVlSbp9TpxEKni6wJ9WU1ZHMjBFREdFMDYyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 28 Nov 2023 02:15:48 GMT
X-Firefox-Spdy: h2
104.18.3.35
151.101.66.137
20.190.177.85
109.169.71.112