Summary
A Concise Overview of the scan result of url https://outlook.live.com/mail/
- Document
- HTML
- 2
- StyleSheets
- 3
- Scripts
- 16
- Font
- 0
- Images
- 3
- Links
- 0
- JavaScript Variables
- 28
- Console log messages
- 0
- Network
- Requests
- 29
- Bytes Transferred
- 1.92MB
- Bytes Total
- 7.72MB
- DNS Record
- CNAME Record
- 8
- A Record
- 4
- AAAA Record
- 4
- Technology
- Web servers
- 1
- Security
- 1
- Miscellaneous
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
0objecteventundefinedonbeforetoggleobjectsharedStorageobjectdocumentPictureInPictureobjectfetchLaterfunctiononpageswapobjectonpagerevealobjectfenceobjectonscrollendobjectlogErrorfunctionhashChangeHandlerfunctionstorePromptValuefunctionFabricConfigobjectowaBackfilledErrorsobjectowaLocationHashstringowaLocationSearchPromptobject_locStringsobjectwebpackChunkOwaobjectscriptsLoadedobject__mobxInstanceCountnumber__mobxGlobalsobject__satchelGlobalContextobject__tsUtils$gblCfgobject__dynProto$GblobjectinsertCssLinkfunctionOwaobjectmsalobject
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Miscellaneous | ||
HTTP/3 | HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web. | Type: headers Name: alt-svc Regex: h3 |
| Web servers | ||
| Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. | Type: headers Name: server Regex: Microsoft-HTTPAPI(?:\/([\d.]{1,250}))? | |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 3 msGood
- dom
- 651 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | outlook.live.com | outlook.cloud.microsoft. | no |
| CNAME | outlook.cloud.microsoft | acdcatm.outlook.mira.tm.svc.cloud.microsoft. | no |
| CNAME | acdcatm.outlook.mira.tm.svc.cloud.microsoft | outlook.ms-acdc.office.com. | no |
| CNAME | outlook.ms-acdc.office.com | AMS-efz.ms-acdc.office.com. | no |
| A | AMS-efz.ms-acdc.office.com | 52.97.250.226 | no |
| A | AMS-efz.ms-acdc.office.com | 40.99.204.194 | no |
| A | AMS-efz.ms-acdc.office.com | 52.97.201.114 | no |
| A | AMS-efz.ms-acdc.office.com | 52.97.176.34 | no |
| CNAME | outlook.live.com | outlook.cloud.microsoft. | no |
| CNAME | outlook.cloud.microsoft | acdcatm.outlook.mira.tm.svc.cloud.microsoft. | no |
| CNAME | acdcatm.outlook.mira.tm.svc.cloud.microsoft | outlook.ms-acdc.office.com. | no |
| CNAME | outlook.ms-acdc.office.com | AMS-efz.ms-acdc.office.com. | no |
| AAAA | AMS-efz.ms-acdc.office.com | 2603:1026:c03:7079::2 | no |
| AAAA | AMS-efz.ms-acdc.office.com | 2603:1026:c03:7071::2 | no |
| AAAA | AMS-efz.ms-acdc.office.com | 2603:1026:c03:6027::2 | no |
| AAAA | AMS-efz.ms-acdc.office.com | 2603:1026:c03:6026::2 | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
outlook.live.com | 7/24/2026 | 7/25/2027 | 1 year 1 day |
res.public.onecdn.static.microsoft | 7/24/2026 | 7/25/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Alt-Svc | h3=":443";ma=2592000,h3-29=":443";ma=2592000 |
| Cache-Control | no-cache |
| Content-Encoding | gzip |
| Content-Security-Policy | default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-30ftcyPmwqDxpUBpd1IYpA==' *.res.office365.com *.fluidpreview.office.net shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' acdn.adnxs.com cdn.adnxs.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com onedrive.cloud.microsoft my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com editor.svc.cloud.microsoft 'self' attachment.outlook.live.net *.adnxs.com api.taboola.com api.msn.com ris.api.iris.microsoft.com srtb.msn.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net 3pidentity.svc.cloud.microsoft; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com m365copilotapp.svc.cloud.microsoft login.live.com *.sharepoint.de login.live.com; object-src *.office.net 'self' blob: attachment.outlook.live.net attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' attachment.outlook.live.net *.adnxs.com *.engage.cloud.microsoft attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy owaMeControlTrustedTypesPolicy ast-policy domPurifyHTML emptyStringPolicyHTML nativeSanitizerTrustedTypesPolicy @fluidx/loop#generic-cdn-codeloader-bundle @fluidx/loop#html-canvas-container 'allow-duplicates'; report-uri https://cspv2.core.microsoft/report/ec96f066-bd3b-47e3-82c7-01af626dd71a/OutlookWeb-Mail-PROD; upgrade-insecure-requests; |
| Content-Type | text/html |
| Cross-Origin-Opener-Policy | same-origin-allow-popups |
| Date | Sat, 25 Jul 2026 19:46:02 GMT |
| Document-Policy | include-js-call-stacks-in-crash-reports |
| Expires | -1 |
| Link | <https://res.public.onecdn.static.microsoft/>; rel="preconnect" |
| MS-CV | m3JCP/BYWh0fPNx3k1RMSA.1.1 |
| NEL | {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":0.01,"success_fraction":0.0001} |
| Origin-Trial | Apss6avQMrDIaTfgtZghJaQJ5VC/PhuSEosafJ3+aDW1VPwBTFN43bgy2UNZLHt2hChKB1jWn+sAk2g6a9Svaw0AAABteyJvcmlnaW4iOiJodHRwczovL2xpdmUuY29tOjQ0MyIsImZlYXR1cmUiOiJMb25nQW5pbWF0aW9uRnJhbWVUaW1pbmciLCJleHBpcnkiOjE3MTY5NDA3OTksImlzU3ViZG9tYWluIjp0cnVlfQ== |
| Pragma | no-cache |
| Referrer-Policy | strict-origin |
| Report-To | {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=EAT&RemoteIP=104.28.153.3&Environment=MT&HttpStatusFrom=BE&ServiceName=Default.mail&MiraPartnerName="}],"include_subdomains":true} |
| Request-Id | 3f42729b-58f0-1d5a-1f3c-dc7793544c48 |
| Server | Microsoft-HTTPAPI/2.0 |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| Transfer-Encoding | chunked |
| Vary | Accept-Encoding |
| X-BEPartition | CLNAMPRD04PHX00 |
| X-BackEndHttpStatus | 200,200 |
| X-CalculatedBETarget | PH0PR04MB7717.NAMPRD04.PROD.OUTLOOK.COM |
| X-CalculatedFETarget | PH8PR22CU001.internal.outlook.com |
| X-Client-Version | 20260717007.13 |
| X-Clique | CLNAMPRD04PHX00 |
| X-Content-Type-Options | nosniff |
| X-FEEFZInfo | PHX |
| X-FEServer | MW4PR04CA0143 |
| X-FirstHopCafeEFZ | EAT |
| X-NanoProxy | 1,1 |
| X-Proxy-BackendServerStatus | 200 |
| X-Proxy-RoutingCorrectness | 1 |
| x-app-name | |
| x-besku | UNKNOWN |
| x-web-server-version | 26.7.10.2 |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| ClientId | 3CB7129B917A433E8BF7C07C1531745D | outlook.live.com/ | 7/25/2027, 7:46:02 PM | yes | no |
| X-OWA-RedirectHistory | Aku-LEsBLnWRW4Xq3gg | outlook.live.com/ | 7/26/2026, 1:48:02 AM | yes | yes |
| msal.cache.encryption | %7B%22id%22%3A%22019f9ad0-2ff9-77d7-99aa-c9c5bb6152fb%22%2C%22key%22%3A%22iUIOVP77Yc3s9ot6_8LroXbtki02d1Hg2ZKsf2_biwU%22%7D | outlook.live.com/ | 12/31/1969, 11:59:59 PM | yes | no |