HTTP/2 301 
cache-control: no-cache
pragma: no-cache
content-length: 0
content-type: text/plain
location: https://outlook.com/mail/
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1
request-id: f7073794-168e-0dcf-9c24-a0f9f02aa78e
x-feserver: CY5PR04CA0004
date: Wed, 26 Aug 2026 20:49:06 GMT

HTTP/2 302 
cache-control: no-cache
pragma: no-cache
content-length: 0
expires: -1
location: https://outlook.live.com/mail/
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1,1
request-id: bc7cde6d-f5ff-8d72-b720-fb4ebc128dd4
x-calculatedfetarget: SJ0PR03CU008.internal.outlook.com
ms-cv: bd58vP/1co23IPtOvBKN1A.1.1
x-besku: GEN6
x-backendhttpstatus: 302,302
x-bepartition: CLNAMPRD04SJC02
x-calculatedbetarget: BY5PR04MB7026.NAMPRD04.PROD.OUTLOOK.COM
x-clique: CLNAMPRD04SJC02
x-content-type-options: nosniff
x-feefzinfo: SJC
x-feserver: CY5PR04CA0004
x-proxy-backendserverstatus: 302
x-proxy-routingcorrectness: 1
x-web-server-version: 26.8.10.2
x-firsthopcafeefz: CYS
alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
set-cookie: ClientId=23EB3ECE37A44A57AC1B15C1C6689E3C; expires=Thu, 26 Aug 2027 20:49:07 GMT; path=/; secure; samesite=none
date: Wed, 26 Aug 2026 20:49:06 GMT

HTTP/2 200 
cache-control: no-cache
pragma: no-cache
content-type: text/html
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1,1
request-id: 26b3e479-95f5-3d8e-eba0-ce06a4690847
x-calculatedfetarget: SEWP216CU006.internal.outlook.com
x-client-version: 20260821009.04
content-security-policy: default-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft swx.cdn.skype.com 'self'; script-src 'nonce-VjP84EkPYSULPq5EQNRMFw==' *.res.office365.com *.fluidpreview.office.net shellprod.msocdn.com amcdn.msauth.net amcdn.msftauth.net *.skype.com *.skypeassets.com *.delve.office.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft static.teams.microsoft.com teams.microsoft.com cdn.forms.office.net content.lifecycle.office.net blob: 'report-sample' 'self' 'wasm-unsafe-eval' acdn.adnxs.com cdn.adnxs.com; style-src *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft shellprod.msocdn.com *.skype.com 'self' 'report-sample' 'unsafe-inline' *.engage.cloud.microsoft; img-src * data: blob: filesystem: cid:; connect-src blob: data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com login.live.com login.microsoftonline.com spoprod-a.akamaihd.net shellprod.msocdn.com *.bing.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.skypeassets.com *.onedrive.com onedrive.cloud.microsoft my.microsoftpersonalcontent.com browser.pipe.aria.microsoft.com *.gateway.messenger.live.com dev.virtualearth.net *.trouter.skype.com *.trouter.io wss://*.trouter.skype.com wss://*.trouter.skype.com:443 wss://*.trouter.io:443 media.licdn.com *.facebook.com onerm.olsvc.com *.qas.binginternal.com *.qas.bing.net wss://*.qas.bing.net:443 wss://*.platform.bing.com wss://*.botframework.com:443 wss://augloop.office.com wss://*.augloop.office.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.office.microsoft.com api.box.com api.dropboxapi.com *.users.storage.live.com www.onenote.com *.storage.msn.com wss://*.pushd.svc.ms wss://*.pushs.svc.ms wss://*.pushb.svc.ms wss://*.pushp.svc.ms wss://*.svc.ms pptservicescast.officeapps.live.com *.sharepoint-df.com *.sharepoint.com wss://*.delve.office.com:443 wss://*.loki.delve.office.com:443 wss://*.loki.delve.office.com *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.online.lync.com *.infra.lync.com wss://*.cortana.ai *.cortana.ai fs.microsoft.com newspro.microsoft.com api.aadrm.com config.edge.skype.com content.lifecycle.office.net *.cp.microsoft.com *.mp.microsoft.com *.m365.microsoft.com *.payments.microsoft.com *.account.microsoft.com checkout.office.com smbpurchase.omex.office.net commerceapi.office.net commercemgmt.m365.microsoft.com checkout.microsoft365.com officeclient.microsoft.com editor.svc.cloud.microsoft *.clarity.ms 'self' attachment.outlook.live.net *.adnxs.com api.taboola.com api.msn.com ris.api.iris.microsoft.com srtb.msn.com *.engage.cloud.microsoft wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com safelinks.protection.outlook.com arc.msn.com arc-emea.msn.com fd.api.iris.microsoft.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com eudb.ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com prod.autodetect.outlook.cloud.microsoft *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com api.flow.microsoft.com *.sharepoint.de proxy.uet.s.microsoft.com rtb.linkedin.com bat.bing.net 3pidentity.svc.cloud.microsoft; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com *.odwebp.svc.ms login.microsoftonline.com m365copilotapp.svc.cloud.microsoft login.live.com *.sharepoint.de login.live.com; object-src *.office.net 'self' blob: attachment.outlook.live.net attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net; frame-ancestors 'self' teams.microsoft.com; font-src data: *.res.office365.com *.fluidpreview.office.net *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com ms-appx-web: sharepointonline.com *.sharepointonline.com *.delve.office.com fs.microsoft.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: data: *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.sharepoint-df.com *.skype.com *.office.net *.office365.net *.office365-net.us *.office.com 'self' attachment.outlook.live.net *.adnxs.com *.engage.cloud.microsoft attachments.office.net attachments.outlook.usercontent.microsoft attachment.outlook.live.net *.sharepoint.com *.sharepoint.de; frame-src * data: mailto: blob:; manifest-src 'self'; worker-src 'self' blob: *.office.com; child-src 'self' blob: *.office.com; require-trusted-types-for 'script'; trusted-types owaTrustedTypesPolicy owa#webpack cdn-url#oneshell safe-xml#oneshell workerScriptTrustedTypesPolicy augloopTrustedTypesPolicy 1DSScriptURL dompurify adaptivecards#deprecatedExportedFunctionPolicy highcharts owaAdsTrustedTypesPolicy @msteams/embed-client @fluidx/loop workerPolicy MeControlScriptURL adaptivecards#markdownPassthroughPolicy fast-html adaptivecards#restoreContentsPolicy @1js/midgard-trusted-types @1js/lpc-common-web#webpack @centro/hvc-loader html2canvas osfRuntimeScriptPolicy yammer-outlook-trusted-types-policy#webpack @azure/ms-rest-js#xml.browser react-virtualized-auto-sizer lit-html officebrowserfeedback#domUtils troubleshootPolicy consolePolicy ori_importmap TrustedTypePolicyFactory workerScriptPolicy iFrameDocumentTrustedTypesPolicy nativePdfPreviewTrustedTypesPolicy workerLoaderTrustedTypesPolicy @1js/search-converged-hostapp-owa-bundle#webpack suiteuxShellTrustedTypesPolicy @azure/core-xml#xml.browser @1js/midgard-bootstrapper#webpack trustedInnerHTMLPolicy domUtilsTrustedTypePolicy dangerouslySetInnerHTMLPolicy overlayScrollbarsTrustedTypesPolicy @msteams/services-io-browser-web-client-update#register-service-worker @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @fluidx/loop#sourceless-iframe webpack-dev-server#overlay placesMapWorkerPolicy @fluidx/loop-app-worker-template ori-worker-policy default owaLoopTrustedTypesPolicy owaTeamsClientTrustedTypesPolicy owaMeControlTrustedTypesPolicy ast-policy domPurifyHTML emptyStringPolicyHTML nativeSanitizerTrustedTypesPolicy @fluidx/loop#generic-cdn-codeloader-bundle @fluidx/loop#html-canvas-container wordxmlBypassOfficeAddIns 'allow-duplicates'; report-uri https://cspv2.core.microsoft/report/ec96f066-bd3b-47e3-82c7-01af626dd71a/OutlookWeb-Mail-PROD; upgrade-insecure-requests;
x-clique: CLAPCPRD01ICN02
document-policy: include-js-call-stacks-in-crash-reports
cross-origin-opener-policy: same-origin-allow-popups
ms-cv: eeSzJvWVjj3roM4GpGkIRw.1.1
link: <https://res.public.onecdn.static.microsoft/>; rel="preconnect"
origin-trial: Apss6avQMrDIaTfgtZghJaQJ5VC/PhuSEosafJ3+aDW1VPwBTFN43bgy2UNZLHt2hChKB1jWn+sAk2g6a9Svaw0AAABteyJvcmlnaW4iOiJodHRwczovL2xpdmUuY29tOjQ0MyIsImZlYXR1cmUiOiJMb25nQW5pbWF0aW9uRnJhbWVUaW1pbmciLCJleHBpcnkiOjE3MTY5NDA3OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
referrer-policy: strict-origin
x-app-name: Mail
x-backendhttpstatus: 200,200
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=KUL&RemoteIP=101.99.90.0&Environment=MT&HttpStatusFrom=BE&ServiceName=Default.mail&MiraPartnerName="}],"include_subdomains":true}
x-bepartition: CLAPCPRD01ICN02
x-besku: UNKNOWN
x-calculatedbetarget: SEYPR01MB5419.APCPRD01.prod.exchangelabs.com
x-content-type-options: nosniff
x-feefzinfo: ICN
x-feserver: KUZPR01CA0009
x-proxy-backendserverstatus: 200
x-proxy-routingcorrectness: 1
x-web-server-version: 26.8.17.3
x-firsthopcafeefz: KUL
alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
strict-transport-security: max-age=31536000; includeSubDomains
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":0.01,"success_fraction":0.0001}
set-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
set-cookie: ClientId=EC32428292E442A4AF9801AF874FB45B; expires=Thu, 26 Aug 2027 20:49:07 GMT; path=/; secure; samesite=none
date: Wed, 26 Aug 2026 20:49:07 GMT