~/d/outlook.com

> dossier for outlook.com

an at-a-glance snapshot. each section streams in independently.

## dns[ok]

open standalone →

A: ttl=159 52.96.172.98
ttl=159 52.96.222.194
ttl=159 52.96.228.130
ttl=159 52.96.111.82
ttl=159 52.96.91.34
ttl=159 52.96.222.226
ttl=159 52.96.229.242
ttl=159 52.96.214.50
ttl=159 52.96.223.2
AAAA: —
NS: ttl=300 ns1-05.azure-dns.com.
ttl=300 ns2-05.azure-dns.net.
ttl=300 ns3-05.azure-dns.org.
ttl=300 ns4-05.azure-dns.info.
SOA: ttl=3600 ns1-05.azure-dns.com. msnhst.microsoft.com. 2017971531 300 120 2419200 60
CAA: ttl=300 \# 20 00 05 69 73 73 75 65 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d
ttl=300 \# 42 00 05 69 6f 64 65 66 6d 61 69 6c 74 6f 3a 63 61 61 72 65 63 6f 72 64 61 77 61 72 65 40 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d
ttl=300 \# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d
ttl=300 \# 21 00 05 69 73 73 75 65 67 6c 6f 62 61 6c 73 69 67 6e 2e 63 6f 6d
ttl=300 \# 18 00 05 69 73 73 75 65 65 6e 74 72 75 73 74 2e 6e 65 74
ttl=300 \# 42 00 0c 63 6f 6e 74 61 63 74 65 6d 61 69 6c 63 61 61 72 65 63 6f 72 64 61 77 61 72 65 40 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d
TXT: ttl=300 "google-site-verification=u61khn2j2qt8IdrjskRMSZ0p_HaFURXKrSsu-uXKyNA"
ttl=300 "google-site-verification=0iLWhIMhXEkeWwWfFU4ursTn-_OvoOjaA0Lr7Pg1sEM"
ttl=300 "google-site-verification=DC2uC-T8kD33lINhNzfo0bNBrw-vrCXs5BPF5BXY56g"
ttl=300 "_ofl74f250a84g188pro5arwqa23zle2"
ttl=300 "v=spf1 include:spf2.outlook.com -all"

fetched 2026-04-24T08:01:41.674Z

## dns[not_applicable]

open standalone →

resolving…

## mx[ok]

open standalone →

pri=5 outlook-com.olc.protection.outlook.com.

fetched 2026-04-24T08:01:41.678Z

## mx[not_applicable]

open standalone →

resolving mx…

## spf[ok]

open standalone →

v=spf1 include:spf2.outlook.com -all

v=spf1
include:spf2.outlook.com
-all

fetched 2026-04-24T08:01:41.679Z

## spf[not_applicable]

open standalone →

resolving spf…

## dmarc[ok]

open standalone →

v=DMARC1; p=none; sp=quarantine; pct=100; rua=mailto:rua@dmarc.microsoft; ruf=mailto:ruf@dmarc.microsoft; fo=1

v=: DMARC1
p=: none
sp=: quarantine
pct=: 100
rua=: mailto:rua@dmarc.microsoft
ruf=: mailto:ruf@dmarc.microsoft
fo=: 1

fetched 2026-04-24T08:01:41.672Z

## dmarc[not_applicable]

open standalone →

resolving dmarc…

## dkim[ok]

open standalone →

default:: —
google:: —
k1:: —
selector1:: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913
selector2:: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4FtIHuwq9952OTOwVZEofzUo9nZJZV7Hn3zOXBHaEOP71nMs+uCheSeYRH34PLvo9MngvAFxXG4X8dpL35onCZq2uivZrSBid1ZPDiDqTsK8y26vCV/RpVSWeJEO0SWejooFY7RJ1sbSIxj3Yj4n95oysVoNk3OIJcLryIgjPwzoxFyFQKfpfzAuBf0xvAs29JW9whxe1A7J9Z+wJVhVs37o2ua+sMb7ypEhVjoGHJnGpHh3qq8ukHMw6XAiSD1bG5jndbWNXEf93E1UAAmIYZvxGqwFU0cpCu9YwmwEXYQtAXORinEYAIQKpIlCtH0hW6XKnsbxnbmUmRs/a1bJQIDAQAB;n=2048,1452627114,1468351914
mxvault:: —

fetched 2026-04-24T08:01:41.683Z

## dkim[not_applicable]

open standalone →

probing dkim selectors…

## tls[ok]

open standalone →

subject cn:: outlook.com
issuer:: DigiCert Global G2 TLS RSA SHA256 2020 CA1 / DigiCert Inc
valid:: Mar 18 00:00:00 2026 GMT → Oct 2 23:59:59 2026 GMT
authorized:: yes
sha256:: 39:4E:11:4F:96:01:99:6C:0A:53:4B:8D:66:4C:90:6B:AB:7C:B6:F7:F5:8C:5F:24:49:F1:34:08:DA:B5:A0:DF
sans: outlook.com
*.hotmail.com
*.internal.outlook.com
*.live.com
*.office.com
*.office365.com
*.outlook.com
*.outlook.office365.com
attachment.outlook.live.net
attachment.outlook.office.net
attachment.outlook.officeppe.net
attachments.office.net
attachments-sdf.office.net
ccs.login.microsoftonline.com
hotmail.com
mail.services.live.com
office365.com
outlook.office.com
substrate.office.com
substrate-sdf.office.com

fetched 2026-04-24T08:01:41.896Z

## tls[not_applicable]

open standalone →

fetching tls cert…

## redirects[ok]

open standalone →

final status: 200 · 3 hops

[301] https://outlook.com/
[302] https://outlook.com/mail/
[200] https://outlook.live.com/mail/

fetched 2026-04-24T08:01:42.133Z

## redirects[not_applicable]

open standalone →

tracing redirects…

## headers[ok]

open standalone →

final url: https://outlook.live.com/mail/

security headers

strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-VffT3J1OPfuMhBwCKS0hjg==' *.res.office365.com *.fluidpreview.office.net wss://*.delve.office.com:443 shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' acdn.adnxs.com cdn.adnxs.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com onedrive.cloud.microsoft my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com editor.svc.cloud.microsoft 'self' attachment.outlook.live.net *.adnxs.com api.taboola.com api.msn.com ris.api.iris.microsoft.com srtb.msn.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com m365copilotapp.svc.cloud.microsoft login.live.com *.sharepoint.de login.live.com; object-src *.office.net 'self' blob: attachment.outlook.live.net attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net blob:; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' attachment.outlook.live.net *.adnxs.com *.engage.cloud.microsoft attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy owaMeControlTrustedTypesPolicy ast-policy domPurifyHTML emptyStringPolicyHTML 'allow-duplicates'; report-uri https://csp.microsoft.com/report/OutlookWeb-Mail-PROD; upgrade-insecure-requests;
x-frame-options: —
x-content-type-options: nosniff
referrer-policy: strict-origin
permissions-policy: —

other headers

alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
cache-control: no-cache
content-encoding: gzip
content-type: text/html
cross-origin-opener-policy: same-origin-allow-popups
date: Fri, 24 Apr 2026 08:01:41 GMT
document-policy: include-js-call-stacks-in-crash-reports
expires: -1
link: <https://res.public.onecdn.static.microsoft/>; rel="preconnect"
ms-cv: ENh+8N3BRi3981+Rg00IUA.1.1
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":0.01,"success_fraction":0.0001}
origin-trial: Apss6avQMrDIaTfgtZghJaQJ5VC/PhuSEosafJ3+aDW1VPwBTFN43bgy2UNZLHt2hChKB1jWn+sAk2g6a9Svaw0AAABteyJvcmlnaW4iOiJodHRwczovL2xpdmUuY29tOjQ0MyIsImZlYXR1cmUiOiJMb25nQW5pbWF0aW9uRnJhbWVUaW1pbmciLCJleHBpcnkiOjE3MTY5NDA3OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
pragma: no-cache
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=MNZ&RemoteIP=184.72.111.0&Environment=MT&HttpStatusFrom=BE&ServiceName=Default.mail&MiraPartnerName="}],"include_subdomains":true}
request-id: f07ed810-c1dd-2d46-fdf3-5f91834d0850
server: Microsoft-HTTPAPI/2.0
set-cookie: ClientId=68286E5232004C738C1687563DD0E659; expires=Sat, 24 Apr 2027 08:01:42 GMT; path=/; secure; samesite=none

fetched 2026-04-24T08:01:42.066Z

## headers[not_applicable]

open standalone →

fetching headers…

## cors[ok]

open standalone →

origin: https://drwho.me
method: GET
preflight status: 301

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-04-24T08:01:41.825Z

## cors[not_applicable]

open standalone →

sending preflight…

## web-surface[ok]

open standalone →

robots.txt

present

<!DOCTYPE html> <html dir=ltr xmlns=http://www.w3.org/1999/xhtml translate=no> <head> <meta charset=utf-8> <meta http-equiv=X-UA-Compatible content="IE=edge"> <meta http-equiv=pragma content=no-cache> <meta name=viewport content="width=device-width,initial-scale=1,user-scalable=0"> <meta name=google value=notranslate> <meta name=format-detection content="telephone=no"> <meta name=scriptVer content=20260410002.46> <meta name=hashedPath content=hashed-v1> <meta name=physicalRing content=WW> <meta name=environment content=Prod> <meta name=bootFlights content=auth-cacheTokenForMetaOsHub,auth-useAuthTokenClaimsForMetaOsHub,auth-codeChallenge,auth-msaljs-eventify,cal-store-NavBarData,auth-msaljs-newsletters,auth-msaljs-meet,auth-msaljs-places,auth-msaljs-bookings,auth-msaljs-findtime,auth-msaljs-landingpage,auth-msaljs-business,auth-msaljs-consumer,pe1416235c1,pe1444542c1,pe14456012,pr1539892c19,pr16347118,pr1759826c7,auth-naa-bookings,cal-reload-pause,workerAsyncLoad,auth-disableAnonymousTokenForHeader,msplaces-hosted-localsessiondata-v2,fwk-enable-default-trusted-types-policy,msplaces-app-boot-sequence,auth-msaljs-hostedplaces,fwk-enable-owa-loop-trusted-types-policy,fwk-init-acc-locstore,auth-msaljs-domainHint,auth-tokenCache-expiryDate,auth-mon-removeFallbackToGATFR,auth-hosted-removeFallbackToGATFR,cal-appCaching-ReloadOnError,auth-msaljs-consumer-boot-errorhandler,fwk-enforce-trusted-types,cal-enable-scheduling-poll,acct-icloudOAuthOobe,auth-mlp-redirect,nh-enableOutlookMigrationInteropRefactor,nh-enableDiagnosticsInteropRefactor> <meta name=cdnUrl content=//res.public.onecdn.static.microsoft/> <meta name=backupCdnUrl content=//res-1.cdn.office.net/> <meta name=cdnContainer content=owamail/> <meta name=devCdnUrl content=> <meta name=ariaUrl content=> <meta name=allowedTrustedTypesUrls content=https://*.public.onecdn.static.microsoft,https://*.cdn.office.net,https://content.lifecycle.office.net/dime/v1,https://ad.doubleclick.net/ddm/trackimpj> <meta name=webServerForest content=namprd03> <meta name=webServerClique content=CLNAMPRD03DSM01> <meta name=wcssFrameUrls content={'DefaultUrl':'https://webshell.suite.office.com','WwdbUrl':'https://wwdb.webshell.suite.office.com','EudbUrl':'https://eudb.webshell.suite.office.com'}> <meta name=scriptPath content=scripts/> <meta name=owaIsAuthenticated content={{IsAuthenticated}}> <meta name=jsTimestamp content=1777017701885> <meta name=publicUrl content=https://outlook.office.com> <meta name=aadAuthorityUrl content=https://login.microsoftonline.com/> <meta name=businessCanonicalHostName content=outlook.office365.com> <meta name=isRPSAuthCookiePresent content=False> <meta name=mlpUrl content=https://www.microsoft.com/{0}/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink={1}&sdf={2}> <meta name=robots content=noindex> <meta name=isServerLocal content=False> <link rel=preconnect href=//res.public.onecdn.static.microsoft/ crossorigin=anonymous> <link rel=preconnect href=https://login.microsoftonline.com/ crossorigin=anonymous> <link rel="shortcut icon" href=/mail/favicon.ico type=image/x-icon> <link rel=apple-touch-icon href=//res.public.onecdn.static.microsoft/assets/mail/pwa/v4/pngs/apple-touch-icon.png crossorigin=anonymous> <noscript>JavaScript must be enabled.</noscript> <title>Outlook</title><link integrity="sha256-SFtsv1dw+QJzGV9IBaeXWfzaV/e5Up2g1chD2/GmZH0=" rel="preload" href="//res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.ed21fae2.js" as="script" crossorigin="anonymous"/><link integrity="sha256-hGrb7PFT4Dzxp6/pl2uPPuJyjQM3H92Pzar3GgEXJW4=" rel="preload" href="//res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a019977b.js" as="script" crossorigin="anonymous"/> <style>@font-face{font-family:FabricMDL2Icons;src:url('//res.public.onecdn.static.microsoft/owamail/20260410002.46/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.public.onecdn.static.microsoft/owamail/20260410002.46/resources/fonts/office365icons

sitemap.xml

present — 0 url(s)

head

title: Outlook
description: —

social

no OpenGraph or Twitter meta tags found

fetched 2026-04-24T08:01:42.062Z

## web-surface[not_applicable]

open standalone →

inspecting web surface…