1drv.ms/w/c/4ff3c133a0979742/Efcuf-ma3HxAmL8MvXP0TV4B6D8TOw2tJ373YbztDpmwRQ?e=ViQzx4
0 B URL 1drv.ms/w/c/4ff3c133a0979742/Efcuf-ma3HxAmL8MvXP0TV4B6D8TOw2tJ373YbztDpmwRQ?e=ViQzx4
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w/c/4ff3c133a0979742/Efcuf-ma3HxAmL8MvXP0TV4B6D8TOw2tJ373YbztDpmwRQ?e=ViQzx4 HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?cid=4ff3c133a0979742&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&ithint=file%2cdocx&e=ViQzx4&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ
x-msnserver: AMS0PF405CC734D
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: gePWBGf87kumOLlzqZtMYQ.0
x-asmversion: UNKNOWN; 19.1402.419.2003
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E93D5CE2576E478FBE4E2862FDAE9DBE Ref B: OSL30EDGE0409 Ref C: 2024-05-04T18:42:52Z
date: Sat, 04 May 2024 18:42:52 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?cid=4ff3c133a0979742&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&ithint=file%2cdocx&e=ViQzx4&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ
453 B URL onedrive.live.com/redir?cid=4ff3c133a0979742&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&ithint=file%2cdocx&e=ViQzx4&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (381), with CRLF line terminators
Hash 7391563c551ca3e58d76fd8f826da7d7
2b1fb2797276f5dce19749b891c264a6e0d0fc3d
b70acd76708aeff4975c98c7ecaccc1666ec902ddf70f44608a167b4cdd0bf65
GET /redir?cid=4ff3c133a0979742&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&ithint=file%2cdocx&e=ViQzx4&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 453
content-type: text/html; charset=utf-8
expires: -1
location: /edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
set-cookie: E=P:VWqkAWps3Ig=:Jym4ntscwowQEycA8NDOY24UfUvRs4Xr7TRruyKAVDo=:F; domain=.live.com; path=/
xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Sat, 04-May-2024 17:02:52 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 7c99668669-sv6tc
x-odwebserver: eurwesteur002542-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8F6F7DBA8FB04AC7A034066AA4C41867 Ref B: SVG20EDGE0307 Ref C: 2024-05-04T18:42:52Z
date: Sat, 04 May 2024 18:42:52 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
7.9 kB URL res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
IP
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash 760f69985c44556f90d31cdb278286be
98632d39e3ca24fdd974ac98bf187963a065ce8a
4fbd8cc4075e1795215327af5e43e8ca3339677802700d19aefc57ba1713a12d
GET /officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:45:16 GMT
x-ms-request-id: 18912414-d01e-001f-303f-6f4c93000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491516722,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848173.1d4bf332&TotalRTCDNTime=2&CompressionType=&FileSize=7886"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
190 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (36211)
Size 190 kB (190544 bytes)
Hash 554b11a82a5113b1c77c1a8c129fddab
efdd5febade34e65edbdf8e49e2c1e29c9d56c13
441b365db38eedfa6048d056a9e7d69e15c494e1fc9399cba3797ee6a77aa462
GET /files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 190544
last-modified: Thu, 02 May 2024 20:29:21 GMT
x-ms-request-id: 4072e0e8-301e-0007-5cd9-9c93f4000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-26.006
x-ms-meta-sourceid: F6146872E460C5C4321E62666A4A68683A9486EDA4B72DE2B507C8C8A682CD5C00
content-encoding: br
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:42:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491516714,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848173.1d4bf32a&TotalRTCDNTime=4&CompressionType=br&FileSize=190544"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
17 kB URL onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash fc8ccaa1ec9ba78997b66050ee176f67
0b6ddd8f84304051426830d374f07fcb136c6224
e82109d838bfc65711252fee9b4de65599915792f0f1e318fcc8f00c830aecb9
GET /edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2 HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: E=P:VWqkAWps3Ig=:Jym4ntscwowQEycA8NDOY24UfUvRs4Xr7TRruyKAVDo=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Sat, 04-May-2024 17:02:53 GMT; path=/
wla42=; domain=live.com; expires=Sat, 11-May-2024 18:42:53 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 7c99668669-p4f2l
x-odwebserver: eurwesteur002542-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9BE92C9F1F3E403AAA24D4283B49BD32 Ref B: SVG20EDGE0307 Ref C: 2024-05-04T18:42:53Z
date: Sat, 04 May 2024 18:42:52 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/12.js
39 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/12.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65476)
Hash 7e8696b25a28fb4e7ea773a68aa8dfe5
2f29d7054388390d0040a5bfd2e6bc02d0a759a6
2abca138c3c22fb15ec89db558736331b6afc0ff557a55b4d2fadab6116cc877
GET /files/odsp-web-prod_2024-04-26.006/wacodcowlhostwebpack.manifest/12.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 38697
last-modified: Thu, 02 May 2024 20:29:25 GMT
x-ms-request-id: 2e79986f-501e-0011-35d9-9c6523000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-26.006
x-ms-meta-sourceid: 23FB0AD6A406C190F5D7D5100518A7C92596D259DABDA4709E47DF5E3FB508D200
content-encoding: br
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:42:53 GMT
akamai-request-bc: [a=23.36.79.39,b=491517263,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848173.1d4bf54f&TotalRTCDNTime=0&CompressionType=br&FileSize=38697"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
api-badgerp.svc.ms/v1.0/token
200 OK 0 B URL POST HTTP/2 api-badgerp.svc.ms/v1.0/token
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectsvc.ms
Fingerprint76:6D:28:DB:9D:06:38:CD:2A:35:0C:FD:C3:D5:35:49:8B:D0:C0:C7
ValidityWed, 27 Sep 2023 21:57:58 GMT - Sat, 21 Sep 2024 21:57:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1.0/token HTTP/1.1
Host: api-badgerp.svc.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
allow: OPTIONS, TRACE, GET, HEAD, POST
public: OPTIONS, TRACE, GET, HEAD, POST
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: appid,cache-control,canary,content-type,x-forcecache,authorization
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A3E738DF83824FD38B743F94C49A7AAF Ref B: OSL30EDGE0318 Ref C: 2024-05-04T18:42:54Z
date: Sat, 04 May 2024 18:42:53 GMT
content-length: 0
X-Firefox-Spdy: h2
api-badgerp.svc.ms/v1.0/token
200 OK 842 B URL POST HTTP/2 api-badgerp.svc.ms/v1.0/token
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectsvc.ms
Fingerprint76:6D:28:DB:9D:06:38:CD:2A:35:0C:FD:C3:D5:35:49:8B:D0:C0:C7
ValidityWed, 27 Sep 2023 21:57:58 GMT - Sat, 21 Sep 2024 21:57:58 GMT
Hash 40084dae260ed54a6ee9ab1db89bf61e
71dec7067f9e78abe8858ef506952f231289a72e
281bda16707bf3ccee7489de4766b5e4560bf531a3f7ecfc36d5ea5901e7bd91
POST /v1.0/token HTTP/1.1
Host: api-badgerp.svc.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 48
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 842
content-type: application/json; charset=utf-8
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: appid,cache-control,canary,content-type,x-forcecache,authorization
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0974C1C7FE7A44EB96724293830590CB Ref B: OSL30EDGE0318 Ref C: 2024-05-04T18:42:54Z
date: Sat, 04 May 2024 18:42:53 GMT
X-Firefox-Spdy: h2
wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
2.7 kB URL wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5825)
Hash 3c166149fec3c386de579a142018ee8b
3fb2a2f6ae93e6e203c89e2df9a87574e27c2a49
58dd85d38e20bae1a5949c44702c7f67c8ab085b899e94397771b5822ed1e6fc
GET /wise-m/owl/5mttl/production/100/manifest.js HTTP/1.1
Host: wise-m.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2668
last-modified: Fri, 03 May 2024 12:20:58 GMT
x-ms-request-id: 799b4b52-e01e-003b-5d54-9dba33000000
content-encoding: br
cache-control: max-age=300
date: Sat, 04 May 2024 18:42:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491517849,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848174.1d4bf799&TotalRTCDNTime=4&CompressionType=br&FileSize=2668"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.slim.53ae94de5a28c29c1a37.js
46 kB URL wise.public.cdn.office.net/wise/owl/owl.slim.53ae94de5a28c29c1a37.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b09a44032defd8f9e04f3bf3d11941f8
c0cf6113c061d91c201ae0736ab80d300f847ca9
36a3ce9690d3a1d842759c44e979cff09016666d6d0212b653d206eb8ab01604
GET /wise/owl/owl.slim.53ae94de5a28c29c1a37.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 45902
last-modified: Thu, 02 May 2024 19:06:04 GMT
x-ms-request-id: f41bae04-201e-000b-2bc4-9c04fc000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491518055,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848174.1d4bf867&TotalRTCDNTime=4&CompressionType=br&FileSize=45902"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
my.microsoftpersonalcontent.com/_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault
0 B URL my.microsoftpersonalcontent.com/_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1
Host: my.microsoftpersonalcontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,prefer
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
www-authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com"
x-networkstatistics: 0,525568,0,0,11137,0,37001
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, TRACE, CONNECT, PATCH, MERGE
access-control-allow-headers: authorization,prefer
x-databoundary: EU
x-1dscollectorurl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://eu-mobile.events.data.microsoft.com/Collector/3.0
sprequestguid: 767125a1-40b4-8000-becc-9b3db98d51cb
request-id: 767125a1-40b4-8000-becc-9b3db98d51cb
ms-cv: oSVxdrRAAIC+zJs9uY1Ryw.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-SVG20r5a&frontEnd=AFD&RemoteIP=91.90.42.0"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.office365.com *.powerapps.com *.yammer.com engage.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 39
spiislatency: 1
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.24817
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7836355B5C0E4C5CA676DB40BADB2101 Ref B: SVG20EDGE0208 Ref C: 2024-05-04T18:42:54Z
date: Sat, 04 May 2024 18:42:54 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/wv/s/h05FEC9B4BA73EC44_App_Scripts/word.boot.js
200 OK 38 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/wv/s/h05FEC9B4BA73EC44_App_Scripts/word.boot.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash efc3f8c8e5f1de4bb85d39dffa806df1
a247ecb24e109930ac3e06c0d4db736175270dda
05fec9b4ba73ec448974fb9ffeff668851d355f967ffd45863b57c7b77207560
GET /officeonline/wv/s/h05FEC9B4BA73EC44_App_Scripts/word.boot.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 37751
last-modified: Fri, 26 Apr 2024 20:30:59 GMT
x-ms-request-id: fd330ba7-e01e-0059-4037-9a7814000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491521166,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848175.1d4c048e&TotalRTCDNTime=1&CompressionType=br&FileSize=37751"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 627
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=31f198ecf7ba206ad93e765415573037273bcbb6a0de7d0199f0838f5ddaa1bd;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: b2b214d6-0096-4c6b-9714-e425b74d9415
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75F
x-officeversion: 16.0.17626.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_visioslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: B4C672DDC99B43BBB16465B147A03274 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 203
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=1f4b33bcf6151c3652963a0a80719da21fbc920e62d2c8e17a8591b79c82e445;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 4924c043-0f1b-4f51-bd84-ac1d588a4a3a
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75B
x-officeversion: 16.0.17626.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DDB9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: F60F007531B44DE09E2A2187CA27E490 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
0 B URL euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion= HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4844
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 7dcb5b26-cfa6-4880-9f1d-b6c22d1faba7
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF0001185C
x-officeversion: 16.0.17630.41001
x-officecluster: GEU7
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 9305A1195ABC45B48B9CCEED1979B1E4 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
0 B URL common.online.office.com/suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 593
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=5e5de036a1eda643b447e2844c02aa902148713db68362772d45b091bac932c1;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 3af28b6c-0897-4af8-a8ff-28083bef3cd7
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D759
x-officeversion: 16.0.17626.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DDB9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 1B6E7E8533C54AFBA5A2BE6DCB75D725 Ref B: SVG20EDGE0308 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
0 B URL euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 112
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 46fa858d-4062-4ac6-a300-634d703db9a6
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DU2PEPF00026853
x-officeversion: 16.0.17701.41001
x-officecluster: GEU3
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0A14E71B6E454A4CA1204E46B5F1ABF6 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1141)
Hash cb5cf9727488f6b50a475ae423e5c1ac
1b5c98d495c1483b5726f6babb7b657afcc99705
c187182ed90edcc51acf85eb324a07c53eb7f7a377480188dcf514f48d800026
GET /officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8647
content-type: text/css
last-modified: Thu, 25 Apr 2024 21:33:47 GMT
x-ms-request-id: f6252218-b01e-0044-1036-9a75a8000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522369,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848175.1d4c0941&TotalRTCDNTime=4&CompressionType=br&FileSize=8647"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/WordEditor_version4.min.css
48 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/WordEditor_version4.min.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8b9ff386ec02dd24471d4811e8a21aa
030a71e436621aad742947fad919942f5d11f9dc
a88cfe8ccd11be4cfc2d55c7de85e2ab120515e578954e6082cad143f7d9ef89
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/WordEditor_version4.min.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47786
content-type: text/css
last-modified: Sat, 27 Apr 2024 20:38:18 GMT
x-ms-request-id: a280f79c-801e-002d-0a3d-9a4ce4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522373,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848175.1d4c0945&TotalRTCDNTime=4&CompressionType=br&FileSize=47786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wp5/wacBoot.min.js
44 kB URL res-1.cdn.office.net/officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wp5/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 59319194d5b66da59ea186401e5a5133
71783be444a88b1b07c08242bb8bb5239f28f6c1
734f769abda6e0d50df5080ddccc92b4383c7de5f7779905841fe1b32619f3d1
GET /officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wp5/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43670
last-modified: Fri, 26 Apr 2024 20:40:56 GMT
x-ms-request-id: 211ab83f-b01e-0054-7b3d-9ab0c0000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522434,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0982&TotalRTCDNTime=4&CompressionType=br&FileSize=43670"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD52A00EC12A2FF16_resources/en-US/clientManifest.exp.js
32 kB URL res-1.cdn.office.net/officeonline/we/s/hD52A00EC12A2FF16_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3a4bb9ef79f88cd411aa8b15d396d2eb
6c356dd40f8675454f135d0af9ee046bf246b99a
d52a00ec12a2ff16513ba4dd4e4c46c791bfcb69040e65f7126ac1f29f1476f2
GET /officeonline/we/s/hD52A00EC12A2FF16_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31498
last-modified: Tue, 30 Apr 2024 09:44:44 GMT
x-ms-request-id: 70eb92b7-801e-004f-3156-9b8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522435,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0983&TotalRTCDNTime=4&CompressionType=br&FileSize=31498"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h684B095B79098D51_App_Scripts/wp5/appResourceLoader.min.js
9.1 kB URL res-1.cdn.office.net/officeonline/we/s/h684B095B79098D51_App_Scripts/wp5/appResourceLoader.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (38563)
Hash f449767c72450152b20776c52ca271c9
2f5db99c8ff5c17176177a8e2c2354674831e2d0
684b095b79098d51feb953b727aaff36d773322a1331a5933bbab3d6678740aa
GET /officeonline/we/s/h684B095B79098D51_App_Scripts/wp5/appResourceLoader.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9088
last-modified: Sun, 28 Apr 2024 15:33:44 GMT
x-ms-request-id: 26b1e5f4-601e-0057-7157-9b51a4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522436,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0984&TotalRTCDNTime=4&CompressionType=br&FileSize=9088"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 61ea504e-a01e-002a-4867-7a2087000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522618,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0a3a&TotalRTCDNTime=4&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h931D3D933B41ED29_App_Scripts/1033/common-intl.min.js
37 kB URL res-1.cdn.office.net/officeonline/we/s/h931D3D933B41ED29_App_Scripts/1033/common-intl.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (56400)
Hash 36c88484937e40d7d77924ee89f00c8f
ea89f7a279a23629bb84c0b39e279c3a87c7b0b9
931d3d933b41ed29ffb4c307133c16d3828e9cf2dd1aeefd68f01e6fde7720e2
GET /officeonline/we/s/h931D3D933B41ED29_App_Scripts/1033/common-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 37293
last-modified: Fri, 26 Apr 2024 20:40:59 GMT
x-ms-request-id: 5e45e402-f01e-006a-7a36-9a27bf000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522619,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0a3b&TotalRTCDNTime=4&CompressionType=br&FileSize=37293"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
1.4 kB URL res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (5962)
Hash de83a7b3bc0a43a5f4e6bf8e71f5413c
bc3274e5c413edfa65fb6333e63d7fbefe1a12a8
a5e36060f6eab9c2b23dc2724f3758edc2d38a7336a619bdb463c3b3a81077cf
GET /officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1445
last-modified: Mon, 11 Sep 2023 19:11:48 GMT
x-ms-request-id: 156aadf9-301e-0028-1762-709e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522823,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b07&TotalRTCDNTime=4&CompressionType=br&FileSize=1445"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hCEA43AD87958FC55_App_Scripts/1033/box4-strings.min.js
16 kB URL res-1.cdn.office.net/officeonline/we/s/hCEA43AD87958FC55_App_Scripts/1033/box4-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Hash 6faa6df0829d0390f0359ae9a7a254ca
50df2d2f1217be728b97e58fa39191ef4f51ac23
cea43ad87958fc555ee4f42b3850ff31a9dd8cbbbf608da91d5cdc6093e72da9
GET /officeonline/we/s/hCEA43AD87958FC55_App_Scripts/1033/box4-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 15532
last-modified: Tue, 23 Apr 2024 22:44:17 GMT
x-ms-request-id: fd2b79df-e01e-0059-4036-9a7814000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522824,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b08&TotalRTCDNTime=4&CompressionType=br&FileSize=15532"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
200 OK 104 kB URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Size 104 kB (103795 bytes)
Hash 57e1ed411f694b36ffab84a5707cc69b
d8675d18a840148f605206536fe410ec368483a1
82a8b4a4ff522d2630e718ebdf1b790060b085f6ebbe54b4113d1ae934cc9c59
POST /we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 5345
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: cd466528-74d6-4650-925f-83b4ee71dc97
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ==, AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
origin-agent-cluster: ?1
x-officefe: PA1PEPF0000BE4E
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
x-content-type-options: nosniff
content-security-policy-report-only: font-src data: 'self' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; media-src blob: *.skype.com *.skypeassets.com https:; object-src 'self' https:; child-src blob: * ms-word: https:; worker-src blob: https:; img-src * data: blob: https:; report-uri /we/reportcsp.ashx
document-policy: js-profiling
reporting-endpoints: default="https://euc-word-edit.officeapps.live.com/we/BrowserReportingHandler.ashx"
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=GEU5&FileSource=SharePointOnlineConsumer"}]}
server-timing: WELPreRender;dur=33,WELRender;dur=0,Total;dur=33,WEAConstructor;dur=0,WEAInitialize;dur=0,WEFOnLoad;dur=0,WEFOnPreRender;dur=2
x-officefd: PA1PEPF0000BE4E
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0D8C373F0FA14E78AA7A628219EFA488 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:55Z
date: Sat, 04 May 2024 18:42:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hC365EA5CCF902465_App_Scripts/1033/wac-wordeditor-strings.min.js
18 kB URL res-1.cdn.office.net/officeonline/we/s/hC365EA5CCF902465_App_Scripts/1033/wac-wordeditor-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Hash ce8f5352bdf33074ca7c6e1f5064179b
7172e7443d87142ad2dd728f8fdd9484948c853a
c365ea5ccf902465e969fa90addad663ece3eb46552cd3b48acc9a0c4f471357
GET /officeonline/we/s/hC365EA5CCF902465_App_Scripts/1033/wac-wordeditor-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 17862
last-modified: Sat, 27 Apr 2024 01:41:43 GMT
x-ms-request-id: fa4627a1-a01e-003a-2536-9ae5ef000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522826,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b0a&TotalRTCDNTime=4&CompressionType=br&FileSize=17862"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h223B538C5C1E2B8E_App_Scripts/WordEditorDS.core.js
407 kB URL res-1.cdn.office.net/officeonline/we/s/h223B538C5C1E2B8E_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (3005)
Size 407 kB (406978 bytes)
Hash 45bd9167e8b3ecee5132216927da699a
62fa6350133e4d5fa288c51e84898ed774cf7b7c
223b538c5c1e2b8eb17239b76634c94a98e2d720b69308b84acb7970f7ca3e87
GET /officeonline/we/s/h223B538C5C1E2B8E_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 406978
last-modified: Tue, 30 Apr 2024 09:38:00 GMT
x-ms-request-id: adda7ae0-601e-0068-0557-9b9907000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522827,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b0b&TotalRTCDNTime=4&CompressionType=br&FileSize=406978"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
4.5 kB URL res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 458f661b-201e-0069-7e45-55c6db000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522896,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b50&TotalRTCDNTime=4&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hAC7306F6757952AD_App_Scripts/WordEditorDS.js
1.0 MB URL res-1.cdn.office.net/officeonline/we/s/hAC7306F6757952AD_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (715)
Size 1.0 MB (1027115 bytes)
Hash 5bd14d3e79ade6f16e11fab3c66a4cf6
867853ba86e2abcbd3966117c0de7c7973e3eae6
ac7306f6757952adec47c6dc7bc930b06850f50273be512abb0c74ae7c9d006c
GET /officeonline/we/s/hAC7306F6757952AD_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1027115
last-modified: Tue, 30 Apr 2024 09:37:15 GMT
x-ms-request-id: ef563428-401e-0022-5956-9b3a88000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491522828,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0b0c&TotalRTCDNTime=4&CompressionType=br&FileSize=1027115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
26 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 27 Apr 2024 20:38:23 GMT
x-ms-request-id: a6d14e2d-101e-003f-33d3-9a3734000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491524080,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0ff0&TotalRTCDNTime=4&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
2.9 kB URL res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 2944, version 4.30147
Hash 569a610df4fd269faa528a2197dfaa9a
cfc7596b939a341c5ddffc53cfd607745af18e8f
09a1411bf361d3d649f4ff5098e0197510232477bf099872f58f5d1ec483e9af
GET /officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2944
last-modified: Tue, 11 Apr 2023 08:47:45 GMT
x-ms-request-id: f76bf3dc-b01e-0054-5c9b-6fb0c0000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491524081,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848176.1d4c0ff1&TotalRTCDNTime=4&CompressionType=&FileSize=2944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
52 kB URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65437), with no line terminators
Hash 3e7e49f41521f668542f307b5b5e37cf
16dc6704de2ed6c06455e6ff710c608c4698f9a1
3e4b692e76c3742fb92a5af6bc95a15209a04c336440603a4bcdf9dc6bd316bb
POST /we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
Content-Type: application/json; charset=utf-8
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-UserType: WOPI
X-WacCluster: GEU5
X-FEMachineId: PA1PEPF0000BE4E
X-SessionStartDimensions: {"Application":"Word","Browser":"Firefox","BrowserMajorVersion":"96","BrowserVersion":"96.0","Host":"SharePoint Online Consumer","IsSynthetic":"False","Os":"Linux","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"OTHER","UiHost":"onedrivecom","UserSessionApplicationMode":"Unified","WACDatacenter":"GEU5"}
X-Requested-With: XMLHttpRequest
Content-Length: 4588
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
pragma: no-cache
content-length: 52240
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 82b60fd8-73fb-42d0-8d12-9fbda86c380b
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefe: PA1PEPF0000BE4E
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
x-officefd: PA1PEPF0000BE28
x-wacfrontend: PA1PEPF0000BE4E
x-officertcproxy: PA1PEPF0000BE28
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: 09190E80AFF54616B94D26E9D87D0CE8 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:56Z
date: Sat, 04 May 2024 18:42:56 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
26 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 27 Apr 2024 20:38:23 GMT
x-ms-request-id: a6d14e2d-101e-003f-33d3-9a3734000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491526727,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848177.1d4c1a47&TotalRTCDNTime=4&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: a9f35bcd-402f-455e-9e30-99ad828534c7
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:57 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Sat, 04 May 2024 18:42:57 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":1,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":1,"Value":"https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ca5f4f0c-d31e-4d3e-a91e-4734e0463b0d
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU5&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:57 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Sat, 04 May 2024 18:42:57 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
153 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 3b6b410c4eaa514dda8622530e08480d
304a1541084a00398d73ef303628f56c00f257f9
ca7f910a7a5fa44fc5cee89013a770ba0986e0c5c2c293aadac4aad53e1dbc4a
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714848176033
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 11878
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=3b82e118f1bb4d55ab645792d70bcbe4&HASH=3b82&LV=202405&V=4&LU=1714848178020; Domain=.microsoft.com; Expires=Sun, 04 May 2025 18:42:58 GMT; Path=/;Secure; SameSite=None
MS0=525d7a51e2954d69b9bca3ce9b0301ea; Domain=.microsoft.com; Expires=Sat, 04 May 2024 19:12:58 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1987
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:42:57 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h5357EB334C8A4568_App_Scripts/1033/word-app-intl-mlr.min.js
109 kB URL res-1.cdn.office.net/officeonline/we/s/h5357EB334C8A4568_App_Scripts/1033/word-app-intl-mlr.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 109 kB (109096 bytes)
Hash 1dcf471840df3ee81141d3e1581047b9
137ce74b73d8376e85bccf62344b2d0fa35a0506
5357eb334c8a45681d3420a5c0eb20bff170950b117ca0aefc645813075b2f97
GET /officeonline/we/s/h5357EB334C8A4568_App_Scripts/1033/word-app-intl-mlr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 109096
last-modified: Wed, 24 Apr 2024 12:31:26 GMT
x-ms-request-id: c9fe1dd7-601e-001a-2853-9a9e48000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491527994,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848178.1d4c1f3a&TotalRTCDNTime=4&CompressionType=br&FileSize=109096"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
153 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 48bbbfe341b7a4cd874676516949327e
71fc88ef3d05bf1c62f25b2f505ca3ffbccf9379
c027b89c44a407bd188cb51f4cdfd1fc7d51caddedd0a78e63fff488d80e1153
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714848177557
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1875
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; Domain=.microsoft.com; Expires=Sun, 04 May 2025 18:42:58 GMT; Path=/;Secure; SameSite=None
MS0=9ee6a5badeda42cea563811d9c832ed2; Domain=.microsoft.com; Expires=Sat, 04 May 2024 19:12:58 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 635
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:42:57 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h986650E9A0D48CD3_App_Scripts/wp5/common.min.js
393 kB URL res-1.cdn.office.net/officeonline/we/s/h986650E9A0D48CD3_App_Scripts/wp5/common.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65468)
Size 393 kB (393121 bytes)
Hash 584d983e4fd5cf0b619c557e59080afb
eb3a5952bdbde2a9f41aa6c562c45a55fbbfb15b
986650e9a0d48cd3dcf65fe52391fa045116262b727151ae22b5bee4e7a72d58
GET /officeonline/we/s/h986650E9A0D48CD3_App_Scripts/wp5/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 393121
last-modified: Tue, 30 Apr 2024 09:44:43 GMT
x-ms-request-id: 91448446-501e-0001-6a5f-9ba04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491528013,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848178.1d4c1f4d&TotalRTCDNTime=4&CompressionType=br&FileSize=393121"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 9292
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 02aafdf1-fb35-4225-9557-5e1b8966a667
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF000AED56
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: AF5B4EAFCFBD459A820BED41C7EB2713 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:58Z
date: Sat, 04 May 2024 18:42:57 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h17D312548FDE1840_App_Scripts/wp5/appChrome.min.js
200 OK 77 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h17D312548FDE1840_App_Scripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 00843ffac3ad60d9b3c189e52622a53a
495dfc7e75d134419fb58c2b2f109ef61238285b
17d312548fde1840ff50a84b5ccd629e2b60654e415fe785aefe02bacf7ca133
GET /officeonline/we/s/h17D312548FDE1840_App_Scripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76801
last-modified: Mon, 29 Apr 2024 23:03:56 GMT
x-ms-request-id: cf3f55b4-101e-004d-075f-9b307b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491528014,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848178.1d4c1f4e&TotalRTCDNTime=4&CompressionType=br&FileSize=76801"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
6.7 kB URL res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (46689), with no line terminators
Hash 9baaaf4d89e3b888bc9e400611d61b68
e4bdf6feedba53db1365f3e37f70fb6073b868af
095762fee3e77525953b8c3091a4f83f80f50fe5ab31499c403b3ed442806974
GET /officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6686
last-modified: Wed, 10 Jan 2024 09:21:00 GMT
x-ms-request-id: af42f4d7-801e-0012-3a6c-668447000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491528015,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848178.1d4c1f4f&TotalRTCDNTime=4&CompressionType=br&FileSize=6686"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
23 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 27 Apr 2024 20:37:57 GMT
x-ms-request-id: afa03159-201e-0046-6d40-9acb10000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491528023,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848178.1d4c1f57&TotalRTCDNTime=4&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2425
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 6752ff28-ded3-4cbb-87a7-58686154263b
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BE50
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E007F940AE04423CA910001BC9601E14 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:58Z
date: Sat, 04 May 2024 18:42:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 0657769b-cbfa-488e-89d6-63b366014250
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2224
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 54f74e99-2e42-48b4-88af-5633a5fe1844
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BE4F
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 8B34281729AA496B9DD6D4E64AA1B7C0 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:58Z
date: Sat, 04 May 2024 18:42:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":4,"Value":"{'k':[{'e' : 4, 'n' : 'BBODI'}]}","Type":"Kpi"},{"Index":2,"MsSinceStart":4,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSH', 'd' : '4'}]}","Type":"KPI"},{"Index":3,"MsSinceStart":124,"Value":"{'k':[{'e': 4,'n':'BBISS'}]}","Type":"Kpi"},{"Index":4,"MsSinceStart":124,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSI', 'd' : '124'}]}","Type":"KPI"},{"Index":5,"MsSinceStart":279,"Value":"WordEditorInstantApp.StartWacBoot","Type":"BootLogs"},{"Index":6,"MsSinceStart":281,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":7,"MsSinceStart":281,"Value":"{'k':[{'e': 4,'n':'BBIGC'}]}","Type":"Kpi"},{"Index":8,"MsSinceStart":1872,"Value":"https://res-1.cdn.office.net:443/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js","Type":"ResourceDownloadSuccess"},{"Index":9,"MsSinceStart":1878,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":10,"MsSinceStart":1942,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":11,"MsSinceStart":2037,"Value":"DocumentCacheRemover.evictSpecifiedCacheItem result: false","Type":"RemoveInvalidDocumentCacheItem"},{"Index":12,"MsSinceStart":2067,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSO', 'd' : '2067'}]}","Type":"KPI"},{"Index":13,"MsSinceStart":2403,"Value":"https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 70b99771-d950-4855-ab79-d7cef79d721f
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU5&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:58 GMT
content-length: 0
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
0 B URL officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-office-application,x-office-platform,x-office-version
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: 89b78b5b-2e30-4ab7-a526-6a199bb76c53
x-officefe: ConfigFE_IN_100
x-officeversion: 16.0.17629.30527
x-officecluster: uks-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
access-control-max-age: 600
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Sat, 04 May 2024 18:42:58 GMT
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
273 B URL officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e781a10d0efa72a38ae3e3e44bb7d57b
d215c3649a3ad7c529538100974ba54dd5917dc8
6924d7db54fff1f3aeacf49be6a8ac2faa1959f14f4ceb55d411d138bfbb3bbf
GET /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/xml
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Office-Platform: Web
X-Office-Application: 132
X-Office-Version: 16.0.17630.41001
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=172800
content-type: application/xml
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: 6352328e-b504-4cd0-97ed-b46a4d9e68c3
x-officefe: ConfigFE_IN_100
x-officeversion: 16.0.17629.30527
x-officecluster: uks-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
x-aspnet-version: 4.0.30319
x-office-cachecleardate: 2009-01-01T00:00:00
x-office-cacheduration: 2880
x-powered-by: ASP.NET
date: Sat, 04 May 2024 18:42:58 GMT
content-length: 273
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur
4.3 kB URL res-1.cdn.office.net/officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @6x7
Hash 3621da92c936c41c63babe6e272263f9
9ac82ed8315f43942b15aa4c43b1d44bc82bd56a
d55e5e9c2ad2e4f522755fd1fd7384f7322c398adb937a44e4f7740c845d7f31
GET /officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4286
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:57:21 GMT
x-ms-request-id: b7576ad0-401e-0013-1a1d-4fe60e000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530735,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c29ef&TotalRTCDNTime=1&CompressionType=&FileSize=4286"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur
4.3 kB URL res-1.cdn.office.net/officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @7x6
Hash 8346c658578be85138045c74294e910d
9ba6fd9cbc4990f43af474459d892c1f35d68149
1e5273dbaa04aef6d486b5b90c00f95d02415965029c10f4b7e6bda598fc8d0c
GET /officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4286
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:50:20 GMT
x-ms-request-id: d5444567-801e-0002-4eff-70412f000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530739,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c29f3&TotalRTCDNTime=1&CompressionType=&FileSize=4286"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur
2.2 kB URL res-1.cdn.office.net/officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @16x21
Hash 40e83bc5d22c7a23066aa9b464d31aba
1646333637a841334449b00f371123bd1b6501d3
a9eb9d74ca2a1d3046ac2cb018629c9c1dc4f18433dc6def6ea8ae5e9d860c18
GET /officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2238
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:58:01 GMT
x-ms-request-id: c2e4ffe0-601e-003b-7902-4b87a6000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530765,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2a0d&TotalRTCDNTime=1&CompressionType=&FileSize=2238"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif
200 OK 49 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type GIF image data, version 89a, 10 x 10
Hash 76084e29cb2cf72b320e888edc583dfb
8a1ca8ddc90d8a1bc2a6d2147bab31b5904bfd83
02d2855c8a5417cd637df1e81f781e42ff2b12ad6dffb923a3822f16b5bfa82a
GET /officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 49
content-type: image/gif
last-modified: Tue, 11 Apr 2023 08:46:51 GMT
x-ms-request-id: e078c1f7-601e-0025-1f34-7156eb000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530771,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2a13&TotalRTCDNTime=1&CompressionType=&FileSize=49"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur
326 B URL res-1.cdn.office.net/officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @20x15
Hash e75bd7914ee3cd4a53a53991cac2df4f
59c0205ffe67456d989fd64beb207432839bd308
3cdd9623189ff53bf6345ec12411b077f66bcf28e11d2149a08a2edeabd9bfbc
GET /officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 326
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:55:14 GMT
x-ms-request-id: 90bf2610-e01e-00a3-10f7-4ba7c7000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530792,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2a28&TotalRTCDNTime=1&CompressionType=&FileSize=326"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png
200 OK 379 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced
Hash cec77a8912d7108335010c33bf6cb916
0038cb6e80aaf4f63422ad800413b14326eb5b27
932fcfffe055aa1d2d2ccaed493e086ecd7c3fd9c8b2034d544b1154d21d36f7
GET /officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 379
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:56:24 GMT
x-ms-request-id: 2bd092e4-101e-0098-62b0-44e263000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491530797,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2a2d&TotalRTCDNTime=1&CompressionType=&FileSize=379"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4588
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: bb51cbdf-5a4a-4b98-88b0-7d44e815d0a4
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF000AE657
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 7A87087A3E64479F9C30D5B9877675DB Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:59Z
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
2.5 kB URL res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (10543), with no line terminators
Hash d4e64835d59be3b4abf3ee7ad4d7d1dc
bba289bfe7c4d1e82fdc3ab1093ed579b2219b6e
24bada8ee5ddc747d0f1297a13f3ec53ecea5aa03e48749329c0f9b0e28e9d09
GET /officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2489
last-modified: Wed, 17 Jan 2024 21:34:45 GMT
x-ms-request-id: 240d7d84-601e-0068-1621-5f9907000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491531039,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2b1f&TotalRTCDNTime=4&CompressionType=br&FileSize=2489"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h11F7035A7BA811FA_App_Scripts/wp5/common50.min.js
507 kB URL res-1.cdn.office.net/officeonline/we/s/h11F7035A7BA811FA_App_Scripts/wp5/common50.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65466)
Size 507 kB (506925 bytes)
Hash 32be6accc20e51d70524391a32ed1266
7e7c9040b5e61649f6e2ebd6eccf85342ac50751
11f7035a7ba811fa15cb609cd67232de11ce80a6645850744fbd29e1d4edfa1b
GET /officeonline/we/s/h11F7035A7BA811FA_App_Scripts/wp5/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 506925
last-modified: Tue, 30 Apr 2024 07:34:58 GMT
x-ms-request-id: 8703caa6-101e-0000-465f-9bff97000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491531057,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2b31&TotalRTCDNTime=4&CompressionType=br&FileSize=506925"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.handlers.546f793a56c1a27c82a5.js
200 OK 19 kB URL GET HTTP/3 wise.public.cdn.office.net/wise/owl/owl.handlers.546f793a56c1a27c82a5.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 67b8b5e0c952ce3d239fd4733aed54f0
43f634f4d34b0126f6e71e582ce7459c8bded093
5565be5b53e12adfdf5b19d9ab8bf7efed7620a236e9359cf83e7d3b552da13a
GET /wise/owl/owl.handlers.546f793a56c1a27c82a5.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19030
last-modified: Thu, 02 May 2024 19:06:05 GMT
x-ms-request-id: fd0d3ebd-c01e-003c-78ca-9cd650000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491532578,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c3122&TotalRTCDNTime=1&CompressionType=br&FileSize=19030"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h6E0C1EDB778F855B_App_Scripts/wp5/sharedComments.min.js
47 kB URL res-1.cdn.office.net/officeonline/we/s/h6E0C1EDB778F855B_App_Scripts/wp5/sharedComments.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (58644), with NEL line terminators
Hash f780156414b995c52f5d945029a63517
8c3335015c6d74ecddb54d2e642a583cb04b9262
6e0c1edb778f855b752641da4eef32097e1bd6b1419589e5167097bd02b07485
GET /officeonline/we/s/h6E0C1EDB778F855B_App_Scripts/wp5/sharedComments.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 46983
last-modified: Sun, 28 Apr 2024 15:33:43 GMT
x-ms-request-id: 5aca6659-901e-006c-2b5f-9b1400000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491532575,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c311f&TotalRTCDNTime=4&CompressionType=br&FileSize=46983"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: b25687b1-a6cb-4077-a4fb-6b7e83a0e64f
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
0 B URL euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 119
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 12a793cd-5133-4b5f-902d-d90f16eac4ba
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000B8CB
x-officeversion: 16.0.17701.41001
x-officecluster: GEU8
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 9837833002DA4C378E9E8ADFF6AF11E0 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:59Z
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: c4b22282-3fbf-4d03-9ed5-052517702ca6
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/listAll_hier.json
200 OK 80 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/listAll_hier.json
IP
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash 570a3464700c535899f161a98aace39a
34e8a553b79a4b503e713d84a7dc1e361729a335
9814d7e977b0d71a645e400515c4ccfa058d8af6dd941eb0f8ef66e320b2b11a
GET /fs/4.39/listAll_hier.json HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 19:59:59 GMT
Accept-Ranges: bytes
ETag: "0x23C04CEA074159BC5D58077E0DC242BED221AD8977E4F05F5E543636393509A5"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=listAll_hier.json; filename*=UTF-8''listAll_hier.json
X-MSEdge-Ref: Ref A: 97A78CD7E8B14AE4BEE4606533CF1BA5 Ref B: LTSEDGE1814 Ref C: 2024-03-26T17:38:07Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=174610
Date: Sat, 04 May 2024 18:43:00 GMT
Content-Length: 79450
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-IsCoauthSession: false
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 23391
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 7fe466c7-5c27-4701-8ec3-877013e2eb43
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-BrowserUlsBeacon: [{"Index":13,"MsSinceStart":3362,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":14,"MsSinceStart":3446,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":15,"MsSinceStart":3446,"Value":"{'k':[{'e' : 3, 'n' : 'BBCST', 'd' : '3446'}]}","Type":"KPI"},{"Index":16,"MsSinceStart":3446,"Value":"{'k':[{'e' : 3, 'n' : 'BBODI', 'd' : '3446'}]}","Type":"Kpi"},{"Index":17,"MsSinceStart":3509,"Value":"https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 55f6078b-204c-479c-a9df-a302ae7ba1d4
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU5&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:42:59 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
228 B URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash fbc6fc68ba5d41789e33894c4e792f4f
6fc7245ffa8b86e9c39b81564cafd3d92d6a60b6
4fb7f2ae69593d05e9c693cba440f47a724a6cfb0f342fae769b8520f6a2e939
POST /we/OneNote.ashx?perfTag=HotStoreStatus_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 3026
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 228
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 204fdf8e-28bd-4443-99e2-197826d02626
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B82
x-wacfrontend: GVX0EPF00002B82
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: AAF35528C3544D0D95B7DC52F2956384 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:42:59Z
date: Sat, 04 May 2024 18:42:59 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
148 kB URL res-1.cdn.office.net/officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147734 bytes)
Hash 0510f729b1344e41d67b7b69bbe221ff
ed09f9bb3494adeadd0f3c52891b7ded8f80f85e
04ae84a2174b2cbccb0a18cd5a3a47aa36b2c9e097968d4f6fa011b6eefd2f5f
GET /officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 147734
last-modified: Fri, 19 Apr 2024 19:27:53 GMT
x-ms-request-id: adcf1496-901e-0031-4b29-961e84000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491535016,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848180.1d4c3aa8&TotalRTCDNTime=4&CompressionType=br&FileSize=147734"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h2E55C4809A827A0E_App_Scripts/wp5/appChromeLazy.min.js
157 kB URL res-1.cdn.office.net/officeonline/we/s/h2E55C4809A827A0E_App_Scripts/wp5/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 157 kB (156588 bytes)
Hash 254dc7c5669449bc346f03fe84e787ba
fb194f62d5497e577cea6f87b04c426c6199f37e
2e55c4809a827a0e5a390d6ef72a90c3afa6a37dd7b87e406a9b91aee501a68e
GET /officeonline/we/s/h2E55C4809A827A0E_App_Scripts/wp5/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 156588
last-modified: Tue, 30 Apr 2024 07:41:13 GMT
x-ms-request-id: 120f0a63-c01e-0061-6c5f-9bdcd4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491535073,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848180.1d4c3ae1&TotalRTCDNTime=4&CompressionType=br&FileSize=156588"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
36 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:16 GMT
x-ms-request-id: 20a081b5-201e-0024-651e-d00937000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491535877,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c3e05&TotalRTCDNTime=4&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536187,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c3f3b&TotalRTCDNTime=4&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hB07CF719FD3C89B2_App_Scripts/wp5/floatingContainerManager.min.js
8.2 kB URL res-1.cdn.office.net/officeonline/we/s/hB07CF719FD3C89B2_App_Scripts/wp5/floatingContainerManager.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (35371)
Hash be73523c970f0bfa1c8f0a8c51f80bfc
b3bc3fd464e0a5766f27f84ca8d0c30993a26275
494ae42932343d70f747f5937271e4bc7b020d53a1a2973876b15af26db7b1dc
GET /officeonline/we/s/hB07CF719FD3C89B2_App_Scripts/wp5/floatingContainerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 14973
last-modified: Sun, 28 Apr 2024 15:33:50 GMT
x-ms-request-id: 9144962e-501e-0001-6f5f-9ba04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:42:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491531077,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848179.1d4c2b45&TotalRTCDNTime=4&CompressionType=br&FileSize=14973"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
0 B URL euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion= HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4997
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: a71962d8-901c-4658-a721-d3d52bfdecb8
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00028A81
x-officeversion: 16.0.17701.41001
x-officecluster: GEU8
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 486D02F6A47942BDBCA2D3D5CF3A274A Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:01Z
date: Sat, 04 May 2024 18:43:00 GMT
content-length: 0
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/rawguids/40122424405
200 OK 89 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/40122424405
IP
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 17 tables, 1st "LTSH", 72 names, Macintosh, Digitized data copyright The Monotype Corporation 1991-1995. All rights reserved. Book Antiqua�
Hash 06a371037c025fd75d7d024cb6ffdbf8
6bfdc080baaf3d0c718eb6858509238a32347ccb
02bbdcb4854395ea99dec35aeac98dc5993953fd9e415b401a559a254b2b42ae
GET /fs/4.39/rawguids/40122424405 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:39:48 GMT
Accept-Ranges: bytes
ETag: "0xCFCC2F1BA1B9BB80D33698D03CC0AE46992CD83CD19D52328AAB3516C7BF168A"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=40122424405; filename*=UTF-8''40122424405
X-MSEdge-Ref: Ref A: EF86DB4C02DD44039CAE06D65833E475 Ref B: LTSEDGE0920 Ref C: 2024-03-28T08:12:27Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 88984
Cache-Control: public, max-age=79638
Date: Sat, 04 May 2024 18:43:01 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.39/rawguids/37426579782
96 kB URL fs.microsoft.com/fs/4.39/rawguids/37426579782
IP
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 17 tables, 1st "LTSH", 47 names, Macintosh, Digitized data copyright The Monotype Corporation 1991-1995. All rights reserved. Book Antiqua�
Hash ab11f25684c1355b95e7c8f40349db3f
b8af461084de763a14a7448dded69086600ead2e
055f18836b6af4545cdb441001a8c02c1494d168f75f90809d1be5d502ce4311
GET /fs/4.39/rawguids/37426579782 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:37:21 GMT
Accept-Ranges: bytes
ETag: "0xCCCD589BD13C7442AB3C20AC697A784D68BBF1DAFC4A7A9FB6C00B6F074F4E0E"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=37426579782; filename*=UTF-8''37426579782
X-MSEdge-Ref: Ref A: E0A64C0DA48643998C8D1F56C84AE1A4 Ref B: LON04EDGE0910 Ref C: 2024-03-27T09:22:04Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 95944
Cache-Control: public, max-age=213388
Date: Sat, 04 May 2024 18:43:01 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
0 B URL euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion= HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2827
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4e92689a-6495-4223-ba80-efb57cdf02b7
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DU2PEPF00017976
x-officeversion: 16.0.17701.41001
x-officecluster: GEU3
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: F5C0FCF3855C4C8BBAFCE93CDB76F454 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:01Z
date: Sat, 04 May 2024 18:43:00 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
6.3 kB URL res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6336
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:56:57 GMT
x-ms-request-id: b2e39cb6-501e-0089-4e2f-4778d7000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536726,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c4156&TotalRTCDNTime=1&CompressionType=&FileSize=6336"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
23 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 27 Apr 2024 20:37:57 GMT
x-ms-request-id: afa03159-201e-0046-6d40-9acb10000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536741,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c4165&TotalRTCDNTime=4&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/rawguids/30376788346
111 kB URL fs.microsoft.com/fs/4.39/rawguids/30376788346
IP
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 38 names, Macintosh, � 2024 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 111 kB (111028 bytes)
Hash 1db309567f58bf107c34f4a052e1228b
894d4a92d491ffb813ccf2133ad5f6858696b939
0844cda3ac866651417a8261e075b81626d94faa1ea039720d96b2f12980f5e4
GET /fs/4.39/rawguids/30376788346 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:33:48 GMT
Accept-Ranges: bytes
ETag: "0x5DB9DD57F51D9847CD203902FE2103E757DF873287CAE1E25BCBF517D413449A"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=30376788346; filename*=UTF-8''30376788346
X-MSEdge-Ref: Ref A: 9C21FBEA6B2347A5BA291C60F669997F Ref B: LTSEDGE2022 Ref C: 2024-03-26T17:58:18Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=174624
Date: Sat, 04 May 2024 18:43:01 GMT
Content-Length: 111028
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
36 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:16 GMT
x-ms-request-id: 20a081b5-201e-0024-651e-d00937000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536763,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c417b&TotalRTCDNTime=4&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
26 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 27 Apr 2024 20:38:23 GMT
x-ms-request-id: a6d14e2d-101e-003f-33d3-9a3734000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536775,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c4187&TotalRTCDNTime=4&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491536776,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848181.1d4c4188&TotalRTCDNTime=4&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/rawguids/30305004928
200 OK 112 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/30305004928
IP
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 40 names, Macintosh, � 2024 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 112 kB (111948 bytes)
Hash 1f2f5cba4b26121b39e77d99b74055ef
b176bc4b997d924068d312d0dc68f6882d05ff32
49c1c79ffcaab3d13c4e8026a9e5e98a9fedf8396efaf4edd1128d10c0a0cebb
GET /fs/4.39/rawguids/30305004928 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:33:48 GMT
Accept-Ranges: bytes
ETag: "0x3A20D2E0B44E0406F8E6BAF2C694BB2BC38AA3CD74E5A3D18CFD8C39B181648D"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=30305004928; filename*=UTF-8''30305004928
X-MSEdge-Ref: Ref A: E33D3974DF714451BD7237EA244F976F Ref B: LON04EDGE0809 Ref C: 2024-03-26T17:58:18Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=154796
Date: Sat, 04 May 2024 18:43:01 GMT
Content-Length: 111948
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
1.9 kB URL res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1922
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:35 GMT
x-ms-request-id: 44f0d600-a01e-009d-4e66-4630b8000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491539089,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848182.1d4c4a91&TotalRTCDNTime=1&CompressionType=&FileSize=1922"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
200 OK 58 kB URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 2056b33b7e5f2424e9c91056916e1033
3562626048dea98c706344b2b623661d4dc61a55
839ab8d28631440c3d2a1c5226582d8300ed8c0d2232a0ac01791c78d7f50e1f
POST /we/OneNote.ashx?perfTag=LatentStyles_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 1643
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 57481
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 8cef0b70-6c4d-494f-8063-44e1958bc1f3, 8cef0b70-6c4d-494f-8063-44e1958bc1f3
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002BB6
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_powerpointslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: A8893900C048428996B760515D153530 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:02Z
date: Sat, 04 May 2024 18:43:02 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
1.1 kB URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash afd325daa28bf93fc9179f279ae3fb10
b6ecbc3eaa318f7f873b91a99ea4c4b4dc01391a
52264866185d15ecc3479b6ff4f3688cc5e53e63981887ec7049eca14d01d612
POST /we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 6348
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1066
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 6758ee29-e074-4e00-9a50-ea16ee9ff52a, 6758ee29-e074-4e00-9a50-ea16ee9ff52a
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B3C
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2EDC2B59BAF843D6AA1505A34EB0C2E8 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:02Z
date: Sat, 04 May 2024 18:43:02 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hF4CFEE081097DEB9_App_Scripts/WordEditorDS.common.js
221 kB URL res-1.cdn.office.net/officeonline/we/s/hF4CFEE081097DEB9_App_Scripts/WordEditorDS.common.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (765)
Size 221 kB (220746 bytes)
Hash 18c8ec191ecd10fe4e71d1126d56d136
6a35ce5521b9d8257dc42a0c3bcdfc4d184f1b2c
f4cfee081097deb925f9c23c5e8e8e32ca507d5e6a69f4e3fc2dc2912f423a69
GET /officeonline/we/s/hF4CFEE081097DEB9_App_Scripts/WordEditorDS.common.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 220746
last-modified: Tue, 30 Apr 2024 09:36:57 GMT
x-ms-request-id: 55e808cb-c01e-005e-165e-9b1477000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491541288,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848182.1d4c5328&TotalRTCDNTime=4&CompressionType=br&FileSize=220746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hF33F2E0CD12FBE0A_App_Scripts/WordEditorDS.box4.dll1.js
604 kB URL res-1.cdn.office.net/officeonline/we/s/hF33F2E0CD12FBE0A_App_Scripts/WordEditorDS.box4.dll1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (2821)
Size 604 kB (603773 bytes)
Hash 570b246693704929b66401414a8704b3
538b2976c9916d6c51b613582005b5e7ae8b3815
f33f2e0cd12fbe0a0d628fdb115df8fb8f44eb65b6f72f6fec27e6eeb990a5e4
GET /officeonline/we/s/hF33F2E0CD12FBE0A_App_Scripts/WordEditorDS.box4.dll1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 603773
last-modified: Tue, 30 Apr 2024 09:37:49 GMT
x-ms-request-id: ac5c101e-701e-0064-785f-9b0e0f000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491541292,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848182.1d4c532c&TotalRTCDNTime=4&CompressionType=br&FileSize=603773"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4660
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 010e9b6f-0948-4365-b10f-f01dd48a5f55
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0006A758
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 51E0F95E9134469AB358C027A45A824D Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:02Z
date: Sat, 04 May 2024 18:43:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
28 kB URL res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65346)
Hash b49801c769b0800be021633e623ecaf5
59c0f562e0927b2522daa3bd18faa9cf03d9efdc
ba1a3d84e1a8d86a082b38b14a17d8a5b853f344f95585c98de41de2e1d8ca96
GET /officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28108
last-modified: Mon, 08 Jan 2024 13:12:32 GMT
x-ms-request-id: 192e2fd2-101e-005d-4e28-71f513000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491543732,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5cb4&TotalRTCDNTime=4&CompressionType=br&FileSize=28108"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h9D205023D4D37751_App_Scripts/WordEditorDS.customerfeedback.js
42 kB URL res-1.cdn.office.net/officeonline/we/s/h9D205023D4D37751_App_Scripts/WordEditorDS.customerfeedback.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (593)
Hash d463b71846440abc168bc9c0b96f9f38
84396e986cd740d73d987256a658beb4e875d8f9
9d205023d4d3775148c65326f9b6e37cc7a7c96be6913b3003d0af2525aa25ca
GET /officeonline/we/s/h9D205023D4D37751_App_Scripts/WordEditorDS.customerfeedback.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41798
last-modified: Tue, 30 Apr 2024 09:38:09 GMT
x-ms-request-id: 5019ca59-b01e-0026-4589-9bb78f000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491543733,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5cb5&TotalRTCDNTime=4&CompressionType=br&FileSize=41798"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h240AFC6A69D2FC7C_App_Scripts/WordEditorDS.uploadFromPC.js
200 OK 238 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h240AFC6A69D2FC7C_App_Scripts/WordEditorDS.uploadFromPC.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 2113042671f375183f0e3e2801e4f152
f835730bc37335a65b12ab21e04c1f6c90d9591b
240afc6a69d2fc7c6dc1754211060d50bdc07241604ddb4c48b99aea19923421
GET /officeonline/we/s/h240AFC6A69D2FC7C_App_Scripts/WordEditorDS.uploadFromPC.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 238
last-modified: Tue, 30 Apr 2024 09:37:54 GMT
x-ms-request-id: 0466f446-001e-0023-1a82-9b6554000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491543734,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5cb6&TotalRTCDNTime=4&CompressionType=br&FileSize=238"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
31 kB URL res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 2f1d74149f052d3354358e9856375219
8019f7a2ea824930f91c3ec375d926b650fb1cff
66c70312de6ca4e1d7ef1e858307764c241a80e7411cee686ea2fc2d74152749
GET /officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31172
last-modified: Mon, 28 Aug 2023 16:59:51 GMT
x-ms-request-id: f119795d-001e-0051-61d7-78621b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491543736,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5cb8&TotalRTCDNTime=1&CompressionType=br&FileSize=31172"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
12 kB URL res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (62133), with no line terminators
Hash 39e15ee4c61a0822733358976e1e1655
fd4177b58d009a2abb059175f2b1c32d1ebad47b
e4a0e7a7ef39f13f511322e90fb4deb5640348da25e2984c2cda9d8b3b7d030d
GET /officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12402
last-modified: Tue, 11 Apr 2023 08:47:53 GMT
x-ms-request-id: 9b5e965d-a01e-0005-081f-da2d4c000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491544204,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5e8c&TotalRTCDNTime=4&CompressionType=br&FileSize=12402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
18 kB URL res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4de42314d6edda70df9779762acc12b8
2af63137abc68c0910107f8598b7de48fd5bbd9c
7e86df2ac06e3524cb7bc6f0b8eb07565ba6d103eaf3cf1a30ac4c78f11a4eaa
GET /officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18308
last-modified: Fri, 13 Oct 2023 06:20:52 GMT
x-ms-request-id: 354bdfe2-e01e-0004-413c-6f7290000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491544205,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848183.1d4c5e8d&TotalRTCDNTime=4&CompressionType=br&FileSize=18308"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 9ed911cb-2971-40b4-95e3-849b32cf7c31
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:03 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 18328
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: a9143b6d-bc16-4ed8-beba-296bd6cd3cc2
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:03 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hC5CB478CB52C90A9_App_Scripts/wp5/editorSettingsManager.min.js
69 kB URL res-1.cdn.office.net/officeonline/we/s/hC5CB478CB52C90A9_App_Scripts/wp5/editorSettingsManager.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65387), with no line terminators
Hash dc233491c3352a9dcdc8138df2a4b61f
9b367028a8c14fb25794a9f22e68d21aa7cbb984
c5cb478cb52c90a9db481aa11af256d16115b15aecdcd60508e4efeb9766d542
GET /officeonline/we/s/hC5CB478CB52C90A9_App_Scripts/wp5/editorSettingsManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68789
last-modified: Sun, 28 Apr 2024 15:33:49 GMT
x-ms-request-id: 6b095834-301e-0065-215f-9b51d3000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491544681,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848184.1d4c6069&TotalRTCDNTime=4&CompressionType=br&FileSize=68789"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Sat, 04 May 2024 18:43:03 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h548993BB661A22F2_App_Scripts/WordEditorDS.augloop.js
200 OK 69 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h548993BB661A22F2_App_Scripts/WordEditorDS.augloop.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (588)
Hash d59c0c53b5af68bce665c52cdc38dfce
0502d11bf45b4eed6231aa0bc96f6857f10cb0d7
548993bb661a22f221b0ae8b8010d41ed2124fc460fb3c790942dfb3e35db6e3
GET /officeonline/we/s/h548993BB661A22F2_App_Scripts/WordEditorDS.augloop.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68944
last-modified: Tue, 30 Apr 2024 09:37:48 GMT
x-ms-request-id: 698d2d1b-901e-0031-1a5f-9b1e84000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491544890,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848184.1d4c613a&TotalRTCDNTime=4&CompressionType=br&FileSize=68944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
6.0 kB URL euc-word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (17397), with no line terminators
Hash c496dbe38ef25e1c070f107c2da8fd07
aa8355e7afb71ed4380d4fcf756d754e34f94dc7
aecf94478b161285a97a0a39b411a578c477fb2ab39ed2738b570b9c737ebb1f
GET /we/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5965
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 02 May 2024 18:32:26 GMT
accept-ranges: bytes
etag: "099a614bf9cda1:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 88984f7b-6dfd-49bc-bf2f-20b274ca0d79
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B34
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002B34
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: D01E38DE6D78482786D27229AA585FC8 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:04Z
date: Sat, 04 May 2024 18:43:03 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 25 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash 9bd46c9b86e41bc71832afffabc42553
1b7597279f927662b5b976d7664af3ae4f330e91
1987c2d31ba54b15c2a42531125d1546fa9622162adab5c17074d8be4a1e49e6
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714848183997
time-delta-to-apply-millis: 1987
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 65045
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 133
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:03 GMT
X-Firefox-Spdy: h2
fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
92 kB URL fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 101x101, segment length 16, baseline, precision 8, 1572x1572, components 3
Hash 67bdb7326254341391bd03f9d82dfbba
05aa1521932ce3963df5eebf712e8a0884c324d0
516e73307371ea36709c7c733e5c0a9fbb09bc4a6be352fbc45164e3cbf6cdd6
GET /f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 00:45:07 GMT
etag: "0xB1FF082B44D7FE3FEA021B93FB418F6D44754EAA795392F997D6B8724D141098"
content-length: 91945
content-type: application/octet-stream
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0co6FYwAAAADdg1CRKDOZRoPt14QKMhkbTE9OMjFFREdFMTgxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
cache-control: public, max-age=66894
date: Sat, 04 May 2024 18:43:04 GMT
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/current/version.json
78 B URL uci.cdn.office.net/mirrored/smartlookup/current/version.json
IP
Hash 4b7618935095fee064d1a483af8c0f58
b4a39ddfcfbf5403bea0cb60708893e545f81c2a
496a9b125ccbbf655309be34411219048c2d0f09778b8601965a6b6f390c6454
GET /mirrored/smartlookup/current/version.json HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 78
Content-Type: application/json
Content-MD5: S3YYk1CV/uBk0aSDr4wPWA==
Last-Modified: Fri, 26 Apr 2024 17:35:27 GMT
ETag: 0x8DC661742EE95D6
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c47bc078-801e-005f-6f00-986e18000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Cache-Control: max-age=123
Expires: Sat, 04 May 2024 18:45:07 GMT
Date: Sat, 04 May 2024 18:43:04 GMT
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/we/s/hF79371190891A538_App_Scripts/wp5/uiSlice20.min.js
251 kB URL res-1.cdn.office.net/officeonline/we/s/hF79371190891A538_App_Scripts/wp5/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 251 kB (251145 bytes)
Hash d61208588c7caa2598f48dd0eedaae9a
ad494c362ee072f8e567f8a39d5f96c9fbe60344
f79371190891a538296a6092119a98eba0cca39f894bfd4091d8657ccef45e00
GET /officeonline/we/s/hF79371190891A538_App_Scripts/wp5/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 251145
last-modified: Mon, 29 Apr 2024 23:04:42 GMT
x-ms-request-id: f51b9105-f01e-0045-795f-9b2a74000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491546337,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848184.1d4c66e1&TotalRTCDNTime=4&CompressionType=br&FileSize=251145"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 70316568-fa9b-44bb-8c47-53ce52b53365
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57334
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ef138475-23ee-4dbb-bda3-7aba9cc772df
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:04 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h6BCECEC4E324B1CE_App_Scripts/WordEditorDS.collab.js
63 kB URL res-1.cdn.office.net/officeonline/we/s/h6BCECEC4E324B1CE_App_Scripts/WordEditorDS.collab.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (961)
Hash ad5184be701c1fc7107e568f731cac03
10d9aa475f1f6bbc5607f2646f6e98910fe20aad
6bcecec4e324b1ce91255a46f5165828108c1524e802c7d486c28b9ba306720b
GET /officeonline/we/s/h6BCECEC4E324B1CE_App_Scripts/WordEditorDS.collab.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 63043
last-modified: Tue, 30 Apr 2024 09:37:20 GMT
x-ms-request-id: e3959243-901e-0021-355f-9bdbec000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491547175,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848184.1d4c6a27&TotalRTCDNTime=4&CompressionType=br&FileSize=63043"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
124 kB URL res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65443)
Size 124 kB (124317 bytes)
Hash b080f97954965444052cd61325d21dc8
41ffbbe96b017b712500685978f64c60f3e913c5
ce3684421dc976318d15c8ffb8cd744b6412c18942451921508b749260291e93
GET /officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 124317
last-modified: Thu, 11 Apr 2024 01:39:06 GMT
x-ms-request-id: 8598b218-901e-001e-62b6-8d134f000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491547176,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848184.1d4c6a28&TotalRTCDNTime=4&CompressionType=br&FileSize=124317"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:04 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
24 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130
upload-time: 1714848185104
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 812
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 152
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
25 kB URL res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 296 x 302, 8-bit/color RGBA, non-interlaced
Hash fd59a454c80d16a1cb998096478f7068
eb74904b48f598ec609be7b6e0089ae5f06db825
83987e0f63d43f20ff756121f3d91b50787c1e4e57d3bca110c06d0d6423c8cc
GET /officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24960
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:42 GMT
x-ms-request-id: 0d39bcc9-301e-009f-790f-4e8e00000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491548130,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c6de2&TotalRTCDNTime=1&CompressionType=&FileSize=24960"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
augloop.office.com/
0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://euc-word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rptQqPKg5wllB1Qf1itpaQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/2 200 OK
date: Sat, 04 May 2024 18:43:04 GMT
server: Kestrel
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-origin: 5B11AF449C7936A3B2302494E264918B677474294E804E6C6E1CEB1F95CAD7CE
x-rp-instance: _D2Worker_143
x-rp-routeid: v2Route
x-rp-clusterid: BackendMastermindMain
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:05 GMT
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://euc-word-edit.officeapps.live.com
112 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://euc-word-edit.officeapps.live.com
IP
File type HTML document, ASCII text, with very long lines (56433), with CRLF, LF line terminators
Size 112 kB (111966 bytes)
Hash 87fcc16b34836d731e4fe3d7d9cc6c5b
11429f924a644f1be81dca580c8e18060d276403
85825a99f71ffb0d82eece73b257ec2fc083e5a096eeca248c7b7556d122e278
GET /mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://euc-word-edit.officeapps.live.com HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-MD5: h/zBazSDbXMeT+PX2cxsWw==
Last-Modified: Fri, 26 Apr 2024 01:47:29 GMT
ETag: 0x8DC6592D52283D5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 203e61f9-101e-005d-61fe-97d0a0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30839994
Expires: Sat, 26 Apr 2025 17:22:59 GMT
Date: Sat, 04 May 2024 18:43:05 GMT
Content-Length: 111966
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js
200 OK 80 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js
IP
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 156b8cc34017824c929617c5f9ba88ff
0d5123880fe16096614324f95bb33c070e7386c4
a2dc73cedf8e2e5eb70909b1acf7170b4c043450faec3ef1f05e95391e5d621b
GET /mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: FWuMw0AXgkySlhfF+bqI/w==
Last-Modified: Fri, 26 Apr 2024 01:47:38 GMT
ETag: 0x8DC6592DA9C0030
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 42e0484d-501e-003e-47fe-974d5b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30839971
Expires: Sat, 26 Apr 2025 17:22:36 GMT
Date: Sat, 04 May 2024 18:43:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
435 B URL res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (919)
Hash 7ab5d254e2da17aeca94fde594c24c2b
9abe817d8c937f97b18fada2e49a5ee3490b6ecd
ee4dd6a857fc823c030e07a12e981931c06750872cda3a0a5269aa58511a18a3
GET /officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 435
last-modified: Tue, 19 Dec 2023 09:22:18 GMT
x-ms-request-id: 201781e6-501e-0001-383b-43a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549204,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c7214&TotalRTCDNTime=1&CompressionType=br&FileSize=435"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
2.9 kB URL res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (20551), with no line terminators
Hash 3d6ca9b0358bef8348220f958f049b61
8b85c3925fbc3d51e57658845a80c67f2101cc26
8d7b8c265df55db9c4be132ca6fe1ceebb0cfe89aa47992738cab92285c3afad
GET /officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2880
content-type: text/css
last-modified: Mon, 24 Jul 2023 22:26:48 GMT
x-ms-request-id: 9e55cd46-901e-0021-4745-5edbec000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549215,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c721f&TotalRTCDNTime=1&CompressionType=br&FileSize=2880"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hC2369ABC27AD3215_App_Scripts/wp5/canvasContextual.min.js
98 kB URL res-1.cdn.office.net/officeonline/we/s/hC2369ABC27AD3215_App_Scripts/wp5/canvasContextual.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 6516282d5c2bf80f25757132b883233b
bf35779dfae1c8a9ef94c1150f6d9387611b1ce3
c2369abc27ad321505fa81e87d975f9d52c3b4071a933222bf475d4d144ab15e
GET /officeonline/we/s/hC2369ABC27AD3215_App_Scripts/wp5/canvasContextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 97554
last-modified: Sun, 28 Apr 2024 15:33:49 GMT
x-ms-request-id: 9144b0fc-501e-0001-355f-9ba04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549211,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c721b&TotalRTCDNTime=4&CompressionType=br&FileSize=97554"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/we/s/161763041001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 786
last-modified: Tue, 30 Apr 2024 09:46:44 GMT
x-ms-request-id: 1fd35905-501e-0063-6a83-9b626c000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549212,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c721c&TotalRTCDNTime=4&CompressionType=br&FileSize=786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Sat, 04 May 2024 18:43:04 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 4f726e32207e4b1cb0f5e86e832752e0
e09ef3ca44be849d0c45bc9e49024d83c6e37eec
38f42c93657c639b924c608a593979673b1eb87c9ab8bb2dd8b5e3a56896d2a8
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848184990
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 24504
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 567
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:05 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4692
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e0ce3d35-6189-4aeb-9dc3-00e016aa801c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BE4E
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 220BA12D894B48F8A098DC4472E89495 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:05Z
date: Sat, 04 May 2024 18:43:05 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h62754A35D0E85FF7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
200 OK 3.6 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h62754A35D0E85FF7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (14645), with no line terminators
Hash 379d2a49d341aaae7ca1c2cab9882c23
fe29fa1bfb2c9ecff459c57d81178a2d3061cfd4
62754a35d0e85ff768430cdb1c88670e2a80c74b18fa5b182a5ec2a3f0dd3a61
GET /officeonline/we/s/h62754A35D0E85FF7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3598
last-modified: Thu, 29 Feb 2024 04:37:21 GMT
x-ms-request-id: 211b0b3f-b01e-0054-6a3d-9ab0c0000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549898,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c74ca&TotalRTCDNTime=4&CompressionType=br&FileSize=3598"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA501723BADC8B5D4_App_Scripts/wp5/sharedCommentsLazy.min.js
102 kB URL res-1.cdn.office.net/officeonline/we/s/hA501723BADC8B5D4_App_Scripts/wp5/sharedCommentsLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (101878 bytes)
Hash d806e62865ea1405f3895ca83976d80d
6f5573990be13832b94e396db83f72942cf2bf59
a501723badc8b5d4f2cb1fce565ff0f20bbbd17024e5c00947018e2f834e3e3a
GET /officeonline/we/s/hA501723BADC8B5D4_App_Scripts/wp5/sharedCommentsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 101878
last-modified: Sun, 28 Apr 2024 15:33:47 GMT
x-ms-request-id: 120f361a-c01e-0061-795f-9bdcd4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491549899,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c74cb&TotalRTCDNTime=4&CompressionType=br&FileSize=101878"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
6.0 kB URL res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Hash dafc4882dfe094df49b427b41a356259
1e27a30b5410ed69280b435b088d93d5b8f0cbb1
350219d5c32123e7feb87e7bd4655d4382ad246d036d395872f01896aaa9d378
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: 944d4720-2e60-4589-bf9d-db9f3ecede8b
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Sat, 04 May 2024 18:43:05 GMT
alt-svc: h3=":443"; ma=93600
content-length: 6044
akamai-request-bc: [a=23.36.79.39,b=491549900,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848185.1d4c74cc&TotalRTCDNTime=4&CompressionType=&FileSize=30746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
x-cdn-provider: Akamai
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js
715 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js
IP
File type JavaScript source, ASCII text, with very long lines (16593)
Size 715 kB (715354 bytes)
Hash f5c5b644d2dcaa8d861b4baf8a2e4d6f
75820a5f4bec32399ea5c896e1c5b59e395f5d41
c87ab3478134c29a136f20738cedafef6c6db28aef99daf3a82598777e5cab80
GET /mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: 9cW2RNLcqo2GG0uvii5Nbw==
Last-Modified: Fri, 26 Apr 2024 01:47:39 GMT
ETag: 0x8DC6592DB37663F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e1dfddb8-601e-008c-5dc2-97b22a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30814383
Expires: Sat, 26 Apr 2025 10:16:08 GMT
Date: Sat, 04 May 2024 18:43:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 24 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714848185545
time-delta-to-apply-millis: 635
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2661
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 336
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
200 OK 47 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (48867)
Hash 3738e9b47e1dde6812bd34b2ed239e74
60f3d074ea13d66ee119f05a355c81b4a6ecd3d1
e726b46d4fb102ce1ce6390e1868c1fefb9f67aba2ab89473f986a7329133763
GET /officeonline/we/s/161763041001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47400
last-modified: Tue, 30 Apr 2024 09:43:58 GMT
x-ms-request-id: 698d4474-901e-0031-395f-9b1e84000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491550349,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c768d&TotalRTCDNTime=4&CompressionType=br&FileSize=47400"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
73 kB URL res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (59507)
Hash a311f770c3973e57c94c2b422478c8d2
ee3fa09f670d0da585ffcb82b247ab819930493f
87dd4d145ac732a457802a9c3c200e8083761de49a6a520ae67969db3392096c
GET /officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 73212
last-modified: Tue, 14 Nov 2023 14:26:32 GMT
x-ms-request-id: f5a12294-c01e-004e-3619-5ed11f000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491550350,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c768e&TotalRTCDNTime=4&CompressionType=br&FileSize=73212"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js
121 kB URL res-1.cdn.office.net/officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (64817)
Size 121 kB (120847 bytes)
Hash df93f308f5e0b410bdb4874dbc3d77ba
01b764ce6509d2f2eb3e3f9796af7ad94d8cea9a
7a67e0e11b66944b71bf46910b7d21891772fed603fa7f361699ac36887383e6
GET /officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 120847
last-modified: Mon, 08 Apr 2024 12:27:03 GMT
x-ms-request-id: 7ead526b-001e-0041-45b3-8aa773000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491550351,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c768f&TotalRTCDNTime=4&CompressionType=br&FileSize=120847"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
17 kB URL res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 9cfefb2d46d6102dac2a24c606f47fea
076b63f4f46ce28648201e2507bbc67fb4f990c5
43c5939cb732d8aa2d20fce97f359f46b7c3b937e60ed576b752ae0a2e73314f
GET /officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16640
last-modified: Tue, 11 Apr 2023 08:47:11 GMT
x-ms-request-id: 2ef6afd2-201e-0056-606a-0c0e78000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491550352,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c7690&TotalRTCDNTime=4&CompressionType=br&FileSize=16640"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/strings/en/shellstrings.json
4.4 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Hash 52af792134b43bb66ac6fb020ec0b324
7b8a12118ee106daa8fcece7625d1de871835a21
e08ca1be8adf907921f594f700e9267582333ba0a4337c820e8c937989301574
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4407
last-modified: Tue, 30 Apr 2024 09:46:06 GMT
x-ms-request-id: 55e814db-c01e-005e-485e-9b1477000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491552404,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c7e94&TotalRTCDNTime=4&CompressionType=br&FileSize=4407"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 61ea504e-a01e-002a-4867-7a2087000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491552408,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c7e98&TotalRTCDNTime=1&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
76 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Hash 492e853de553fd1929371537bdd53d5e
a9e9d7df993298bd87f9c408f4a5f259cb06e9b1
591067b470707f02b9e49b9f95f7368a345384f4f2ae62c70ee98730ba5b32a4
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76215
last-modified: Tue, 30 Apr 2024 09:45:18 GMT
x-ms-request-id: 120f377f-c01e-0061-465f-9bdcd4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491552405,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c7e95&TotalRTCDNTime=4&CompressionType=br&FileSize=76215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD374B266E4D85F31_App_Scripts/WordEditorDS.worker.js
573 kB URL res-1.cdn.office.net/officeonline/we/s/hD374B266E4D85F31_App_Scripts/WordEditorDS.worker.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (781)
Size 573 kB (573357 bytes)
Hash f9d473fc106b1b9e14e4dedbcf6d7349
3f97d42b99b77e109fa93b7e53276a97777eb7b0
d374b266e4d85f312a29051faef3227cfe12be1acfc7ab1b9484f87b39a0ed8f
GET /officeonline/we/s/hD374B266E4D85F31_App_Scripts/WordEditorDS.worker.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 573357
last-modified: Tue, 30 Apr 2024 09:37:58 GMT
x-ms-request-id: 3095a99a-201e-0069-0385-9bc6db000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491552409,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848186.1d4c7e99&TotalRTCDNTime=1&CompressionType=br&FileSize=573357"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17630.41001&language=en-US
2.6 kB URL ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17630.41001&language=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 80882570bf51ffedfd9dd3bf21ab6f9c
8da917e12767ff5c2affabbf4903ee702d879ca4
3696309e168d1676029b135da893190984a4c660a092be63f1bc8029554c6a78
GET /config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17630.41001&language=en-US HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 2592
content-type: application/json
content-encoding: br
expires: Sat, 04 May 2024 19:43:06 GMT
etag: "b61+X9sEfZrHE0yQxcgSsu/wUwJo5fisAZBjeEj59JQ="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=CHILL&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
timing-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4AF726BFCCFC4351977C09E2A2B65924 Ref B: OSL30EDGE0410 Ref C: 2024-05-04T18:43:06Z
date: Sat, 04 May 2024 18:43:06 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:06 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/admin/api/uxversion?bldVer=v1
200 OK 0 B URL GET HTTP/2 admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ms-mac-hostingapp,x-ms-mac-locale
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=9cc04111-41d1-4b30-b7ef-b7c2cdea8f21; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=9cc04111-41d1-4b30-b7ef-b7c2cdea8f21; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8BA33E1C6B174ECC91A01EDD817C0EC0 Ref B: SVG20EDGE0107 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
3.4 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (11364), with no line terminators
Hash 515e8cbc3f0c72a662af65985925e4b2
93c5ab64c4d37fe74739c74554e78a4a2b51d7cb
091a20521dfc3445431caf150554cce2f9ab79dee01430236bc7cd89adeeb469
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3413
last-modified: Tue, 30 Apr 2024 09:45:48 GMT
x-ms-request-id: c06c5838-201e-001b-3590-9bc194000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491553980,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848187.1d4c84bc&TotalRTCDNTime=4&CompressionType=br&FileSize=3413"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: d9aa2021-f57d-440a-8f73-9f5b285bf3bc
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h263561FD80DD0D05_App_Scripts/WordEditorDS.box4.dll2.js
196 kB URL res-1.cdn.office.net/officeonline/we/s/h263561FD80DD0D05_App_Scripts/WordEditorDS.box4.dll2.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (603)
Size 196 kB (196282 bytes)
Hash 16ca51f58453c7019b3a84e3484c1213
3f87768d5f6cbe27c880a376f676ff926d706dd8
263561fd80dd0d05ce4ef33e0fc9e7cd657c61135c136eb1391963ffae65667e
GET /officeonline/we/s/h263561FD80DD0D05_App_Scripts/WordEditorDS.box4.dll2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 196282
last-modified: Tue, 30 Apr 2024 09:37:43 GMT
x-ms-request-id: 7df308e0-701e-0029-1d5f-9bc1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491553981,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848187.1d4c84bd&TotalRTCDNTime=4&CompressionType=br&FileSize=196282"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
prodeu.augmentation.osi.office.net/officeaugmentation/searchendpointv4/
34 B URL prodeu.augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: prodeu.augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-correlationid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: text/plain; charset=utf-8
content-encoding: gzip
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_3
x-officeversion: 16.0.17630.42626
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 04ba89fc-7fe2-445b-8310-746386346d00
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-methods: POST
access-control-allow-headers: content-type,x-correlationid
access-control-max-age: 86400
access-control-expose-headers: *
x-officeprocessid: 11644
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Sat, 04 May 2024 18:43:07 GMT
content-length: 34
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1
174 B URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 1be2db54689ad1b680b9c613627262d3
f54780f30bd6a7e9d76f97119375f88e6f0cb7f1
ee614b4b8f4d035bfacbe4476a83c3721e4bf5c9e0f0312053b430787b550d7d
POST /we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 3182
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 174
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 75b258b2-691f-4840-8b6e-a2eff6381572, 75b258b2-691f-4840-8b6e-a2eff6381572
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B42
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0337A8E4A76B4FE1A850EAB13973D81C Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:07 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/admin/api/uxversion?bldVer=v1
200 OK 2.3 kB URL GET HTTP/2 admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash 8edc689ff4ae555808c813bd8006dc7f
8f28e6a283c5c280836a8b953eb04a5dd2972733
65c8dedc2d10a9fb98e22bb9fbcc80af8aad370a5f94f40ab4684e1e4b373b5d
GET /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ms-mac-locale: en
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2257
content-type: application/json; charset=utf-8
expires: -1
set-cookie: s.SessID=2fd7ee82-7707-4cfd-b603-f9613803b965; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=2fd7ee82-7707-4cfd-b603-f9613803b965; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 61238753-88c9-4650-8e44-b178280dcbf8
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 67FFCDDB475A413FAFEED798826B2B5A Ref B: SVG20EDGE0107 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:06 GMT
X-Firefox-Spdy: h2
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
294 B URL ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 562dd22d17316d2e181b1dbeb79809a7
bdf7ec851ef57a4b0ef464259dd77fb7a2073710
e5bff3ce949ae4b233a4bad960579d3d073f7f473aed664c4831061628436156
GET /config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 294
content-type: application/json
content-encoding: br
expires: Sat, 04 May 2024 19:43:07 GMT
etag: "8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=OneShell&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
timing-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D72F1FE684324F0D8BCD0C4AD3AB947A Ref B: OSL30EDGE0410 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:07 GMT
X-Firefox-Spdy: h2
prodeu.augmentation.osi.office.net/officeaugmentation/searchendpointv4/
58 B URL prodeu.augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 8ba6db3c74a8722bad76ce3bf0ad7ca9
f3f42b729703f2b384aa24edc983dab5cb90688c
504bdd02dbdda1a38e0cf742c53f482f0543576138acdde3c8cee833f6fb4eae
POST /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: prodeu.augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-correlationid: 3ef3f991-ff5b-460c-8fdf-19a727e8eb89
Content-Length: 39
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-encoding: gzip
etag: W/"18-8/QrcpcD8rOEqiTtyYPatcuQaIw"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_3
x-officeversion: 16.0.17630.42626
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 3ef3f991-ff5b-460c-8fdf-19a727e8eb89
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With
access-control-max-age: 600
access-control-expose-headers: *
x-officeprocessid: 11828
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Sat, 04 May 2024 18:43:07 GMT
content-length: 58
X-Firefox-Spdy: h2
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
0 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-clientsessionid,x-correlationid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 04 May 2024 18:43:07 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-clientsessionid,x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: c5c75d340089e9d6ec3d07249acd764b
x-servicecorrelationid: c5c75d34-0089-e9d6-ec3d-07249acd764b
x-machine: OMEXNODE2000004__omexexternal-prod-neu-2-001_4
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: c1cb817e-fa63-419b-91a9-a8934543f13a
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
euc-collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0
0 B URL euc-collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0 HTTP/1.1
Host: euc-collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE3
x-userhostaddress: 91.90.42.0
x-correlationid: b033dd57-5c0d-4de6-ba15-0ed91e1bded2
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
x-officefe: AM1PEPF00025BE3
x-officeversion: 16.0.17624.41001
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
access-control-allow-headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D1BE21CDE454469BB8A30CA154640D39 Ref B: SVG20EDGE0408 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
47 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (42919)
Hash 591a34d6b3813354922fbeb14dde429b
d9157e2491506a9ebef5d1636946aac8e1dab9ee
6e2136a477d4175bf0f44af5fe605c3c537a302aa983d0f3b33f9e2c7dd53997
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47287
last-modified: Tue, 30 Apr 2024 09:45:20 GMT
x-ms-request-id: f51ba7bc-f01e-0045-375f-9b2a74000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491554740,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848187.1d4c87b4&TotalRTCDNTime=4&CompressionType=br&FileSize=47287"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 46317
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 283bd09f-8380-4e36-98e2-2a8add09de66
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:07 GMT
content-length: 0
X-Firefox-Spdy: h2
res.cdn.office.net/admincenter/admin-main/2024.4.29.2/floodgate.en.bundle.js
261 kB URL res.cdn.office.net/admincenter/admin-main/2024.4.29.2/floodgate.en.bundle.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12695)
Size 261 kB (260758 bytes)
Hash dfed761555f5383e848fe9a8f74d7a78
653ce78123f8e442b52ed58abf41138b7850f552
2b5b6006767e796e8bdb0b0a8bf1e95e5c64a6e82ba3c5f9075a2540655eae91
GET /admincenter/admin-main/2024.4.29.2/floodgate.en.bundle.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 260758
last-modified: Thu, 02 May 2024 17:01:11 GMT
x-ms-request-id: 322710b5-c01e-0013-55e3-9cdb9b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491555098,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848188.1d4c891a&TotalRTCDNTime=1&CompressionType=br&FileSize=260758"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
406 kB URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Size 406 kB (405920 bytes)
Hash dbcc12b65b0a2cfed8be97ea3c2ae960
437f363926a676413bc21a43dd8526d0eb725ad9
c75043c3a941e2c80a7db24965185a01dd704500ef3ceeecb595d76ac16b6ef4
GET /campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17630.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU5%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-clientsessionid: a27864c4-9583-4b1f-4301-6f6656c50bd1
x-correlationid: b459bf7b-9647-49a7-065f-eb950afc6982
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 18:43:07 GMT
content-type: text/plain; charset=utf-8
server: Microsoft-HTTPAPI/2.0
access-control-allow-origin: *
x-activitytraceid: 955805c41ff6a981e824f07b155540da
x-servicecorrelationid: 955805c4-1ff6-a981-e824-f07b155540da
x-machine: OMEXNODE2000002__omexexternal-prod-neu-2-001_2
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 0a494f19-a6ff-4b85-a21e-c8ac818b7963
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848186602
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 4086
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 1455
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:07 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
200 OK 33 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 89a218ddab054ddc4c43d08ecc0a2d25
2bb4f01c5cd8dae82afccc5a9f5ce35c0f94927f
bd8c3e57a02276353eba9fed640873f0fdb73ab6d582c4b732a53c5f44cc26cf
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32790
last-modified: Tue, 30 Apr 2024 09:45:15 GMT
x-ms-request-id: 9144daad-501e-0001-135f-9ba04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491555892,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848188.1d4c8c34&TotalRTCDNTime=4&CompressionType=br&FileSize=32790"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
39 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 50da638516bbf2be40298f656b22c2a2
cc4e4cdcff4ec197f50be5ac355515dc8c1d3f83
d6d8af4ed1b794571b69d063aac3cc05526e4658054e539bc95afeb0e1a1ccfe
GET /officeonline/we/s/161763041001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39351
last-modified: Tue, 30 Apr 2024 09:45:34 GMT
x-ms-request-id: 9144c0d4-501e-0001-4d5f-9ba04b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491555893,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848188.1d4c8c35&TotalRTCDNTime=4&CompressionType=br&FileSize=39351"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714848188180
302 Found 0 B URL GET HTTP/1.1 storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714848188180
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
FingerprintF6:41:8A:2C:C9:47:1D:83:AD:7E:7D:F0:4D:BE:49:48:DE:5B:65:B0
ValidityFri, 12 Jan 2024 05:00:03 GMT - Mon, 06 Jan 2025 05:00:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714848188180 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714848188&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: AM3PPF54579213E
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: SSlw9s8+SUGiaBzNUD2sfw.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 4212.9205
X-ClientErrorCode: PassportAuthFail
X-ErrorCodeChain: Unauthenticated
X-AsmVersion: UNKNOWN; 19.1402.419.2003
Date: Sat, 04 May 2024 18:43:07 GMT
Connection: close
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
209 B URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 2d3ffd1edb21381eb6a7f5302effc3c2
459249c93ef10a0b840e71d8cf4da1326135e7f4
9deb4bccdaa5c11b22f1fb02b2844d37a4222f35c5456891e63cdb35ab54b82e
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 2305
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 209
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 376691bc-a976-4963-8319-08f7edd467e5, 376691bc-a976-4963-8319-08f7edd467e5
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B34
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: 6FDAEAA218C04C369EB4379A2214F8BA Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:08Z
date: Sat, 04 May 2024 18:43:08 GMT
X-Firefox-Spdy: h2
euc-collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0
4.1 kB URL euc-collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 291f393200e40cafc2a761d7e48b5a9b
537015df597015b3d35e45820c84d4d558173f64
2af165c52c9d3c5dc101fb49484451bcdc2fb5d89890cbbbee639f85f5c392c9
GET /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&ClientId=%7Bcd466528-74d6-4650-925f-83b4ee71dc97%7D&usid=cd466528-74d6-4650-925f-83b4ee71dc97&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0 HTTP/1.1
Host: euc-collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-CorrelationId: 90e97de4-07ef-41d8-993a-1e88ea61a0ad
RTC-TokenProofkey: True
RTC-IsWacJsBootFsRequest: True
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, max-age=31535999
pragma: no-cache
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PUK2
x-frontend: RtcNetCoreLB1
x-machinename: LN2PEPF00010E6B
x-userhostaddress: 91.90.42.0
x-correlationid: 90e97de4-07ef-41d8-993a-1e88ea61a0ad
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
x-officefe: LN2PEPF00010E6B
x-officeversion: 16.0.17624.41001
x-officecluster: PUK2
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: LN2PEPF00010E6B
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 00BB3795157A4D87B038D791CF788C00 Ref B: SVG20EDGE0408 Ref C: 2024-05-04T18:43:07Z
date: Sat, 04 May 2024 18:43:06 GMT
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714848188&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
11 kB URL login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714848188&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (24067)
Hash f3ece28acc20999ba5015e2bb5d73425
ad3f00f0deb30ea1d93e74924f2483521fe9b7f2
b2f894f29d0673c0334490a38237183c0ff4542d0c66c251b160486d2b60c206
GET /login.srf?wa=wsignin1.0&rpsnv=151&ct=1714848188&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Sat, 04 May 2024 18:42:08 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C543_BL2
x-ms-request-id: 086c6133-bfb1-4311-8494-8cc37fc49da5
PPServer: PPV: 30 H: BL02EPF0001D94D V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=63b3f69581d746a1b0a0da591ac3bc34; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1714848188&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Thu, 29-May-2025 18:43:08 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-9caccbb3-21ad-41e6-a8bf-8ec6e93e3d89; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.Dp!Js!3yNsicQx!yU01v*lqfoEQ7nmeqcVUZNuefW*E9KZGdb0ecXL0lXbvS0C1KG7dYtgk3yh3NQP7TtiwY9IqxZYBHtu7DKcrP2Ev5oe09ZwFpZI8QTRvTl1QSP74EA7uoyBZ7yp3AZdGDXMnepwHmX!hKnZRIKPELs3e894bHSXALYEjT5ITvrSR!oZUxYGUNn6qLeY0NJLcglyXdrCBa7Dn8C4SwzM7GL0SLbD4SRvBXAH43NzQTOjHqyLNyHrUa75ln6LcAJCqjTrLoXKdaoO9hcPTdCp28ufybtGgW9UTLEAwDGqkgFANc3ulhVdxNqZqjI054KDQmIl5yo0wr43u!BGuXxwzA2en9gnrUeT3Y!gBBWKCC0dm6QPqy2Y7ru!8lnZS6dMqQ9v!ekC*O11QJnJ929ESfLFULNopQ; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Sat, 04 May 2024 18:43:07 GMT
Content-Length: 10782
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
200 OK 110 kB URL GET HTTP/2 euc-word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Size 110 kB (109710 bytes)
Hash 82b06804abce50ec5af9d99a6f1cc8b6
a0f29b49a1349452bc023b4c8c3d7842a62816d4
323e256f28835391e88e6f2d6d4c209744c2c8570a4f8f4d9de9f3897ffedd52
GET /we/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: df37a763-8706-435b-9ce6-a6d5c2e5fa70, df37a763-8706-435b-9ce6-a6d5c2e5fa70
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002BC5
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: AAC49203492F49D1BE5D425FF8A3C0C6 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:08Z
date: Sat, 04 May 2024 18:43:08 GMT
X-Firefox-Spdy: h2
peu3-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8
0 B URL peu3-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8 HTTP/1.1
Host: peu3-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://euc-word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f0QFBoyP/kxVwO16fmayzg==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PEU3
X-FrontEnd: RtcNetCoreLB1
X-MachineName: DU2PEPF00025B6D
X-UserHostAddress: 91.90.42.0
X-CorrelationId: 490f6006-4933-4235-a3d7-5f1fb9af2c5b
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeFE: DU2PEPF00025B6D
X-OfficeVersion: 16.0.17626.41000
X-OfficeCluster: PEU3
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://euc-word-edit.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
Sec-WebSocket-Accept: A+eTdp0uf+wWx14Dd4KSfA3a5rI=
Connection: Upgrade
Date: Sat, 04 May 2024 18:43:08 GMT
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 37a032e85ae1b212255106f60eff93a9
d4932526175e6632c06c87539610d7e5ef467517
d0c3e6c8d25e655f19d3788bbf4982f52cba3498833d7d44ccf64e7e3f3de5a2
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848188720
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 7911
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 556
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:08 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ms-mac-appid,x-ms-mac-hostingapp,x-ms-mac-version
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=481ac136-89ee-4972-90ba-4071ed06c406; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=481ac136-89ee-4972-90ba-4071ed06c406; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AB9EA1F5791E4BDDBAF552448DABF322 Ref B: SVG20EDGE0107 Ref C: 2024-05-04T18:43:09Z
date: Sat, 04 May 2024 18:43:08 GMT
content-length: 0
X-Firefox-Spdy: h2
peu3-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714848183774
54 B URL peu3-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714848183774
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 293d4cc6dd528e7615522a837480486e
f64c7541af99681c1a7131099f069d0e54c7a2e2
cc28b3115c87326f6bf2208d0a8278052c91245465daa8a1132aa9a9790c91c7
GET /rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3d1715276575463&ClientId=%7bcd466528-74d6-4650-925f-83b4ee71dc97%7d&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&mid=DU2PEPF00025BB2&ts=17148462980000000&eTag=%221404d446-0000-1100-0000-66367a5a0000%22&waccluster=PEU3&rr=UlRDLUN1cnJlbnRQcm9vZktleT1wUEZ1NyUyZkNxaHlKMXRyJTJib1dmTTAlMmYlMmJZUWhwUFlhVFlRRGRoZ2pmN05iUDglM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDg0ODE3NTg5NjkyNjMmY2JkcGE9VHJ1ZSZjZHA9ZXVjJmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD0&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17630.41001&corrid=490f6006-4933-4235-a3d7-5f1fb9af2c5b&connectionToken=OTp6ul9kYXlF57ox9Kwavw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714848183774 HTTP/1.1
Host: peu3-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PEU3
x-frontend: RtcNetCoreLB1
x-machinename: DU2PEPF00025BB2
x-userhostaddress: 91.90.42.0
x-correlationid: 490f6006-4933-4235-a3d7-5f1fb9af2c5b
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
x-officefe: DU2PEPF00025BB2
x-officeversion: 16.0.17626.41000
x-officecluster: PEU3
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: DU2PEPF00025BB2
rtcsessionid: ff785225-02f4-40bc-9e0a-69f9e1a03ff4
x-officertcproxy: DU2PEPF00025BAF
date: Sat, 04 May 2024 18:43:08 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 23079
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b5d0f8af-cf2e-44bf-b59e-f6162c99a48f
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:08 GMT
content-length: 0
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
x-ms-mac-appid: 36414420-b8c7-4fd2-9c3f-c2c64ffd13bc
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 7489
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=07618924-feef-465e-bc68-423cbb25a37c; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=07618924-feef-465e-bc68-423cbb25a37c; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 5ffe7705-f68f-4a03-af44-2ba869a9a8c0
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 149792FF91544502BBD762C4681E3743 Ref B: SVG20EDGE0107 Ref C: 2024-05-04T18:43:09Z
date: Sat, 04 May 2024 18:43:08 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h7F9BCBF085B9E397_App_Scripts/wp5/addInLazy.min.js
30 kB URL res-1.cdn.office.net/officeonline/we/s/h7F9BCBF085B9E397_App_Scripts/wp5/addInLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 928b9bdf43a5a24d02348ec077d00c66
a6d7dc0a33c82975fc4e229043f20f68b8d8ecc4
7f9bcbf085b9e397e9db725d402c9304839ffc99cac849a694b8fd8616a0a263
GET /officeonline/we/s/h7F9BCBF085B9E397_App_Scripts/wp5/addInLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29881
last-modified: Fri, 26 Apr 2024 20:40:59 GMT
x-ms-request-id: 5545950a-601e-0068-2c3d-9a9907000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491558972,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848189.1d4c983c&TotalRTCDNTime=4&CompressionType=br&FileSize=29881"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 5486536d-0ede-42f7-a0d0-362a31cac6ec
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:08 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&sl=1&u=1
245 B URL euc-word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&sl=1&u=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash df4d516b18c7de71302a741064222cf9
f75300409d19dacb1b84e9244fcccbcb39cc194a
ca8ed8792560935b248dd480a51e8211f5225ad77cf8fb523feb63fa18a955e5
POST /we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252F4ff3c133a0979742%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252Fe97f2ef7dc9a407c98bf0cbd73f44d5e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EgHH1bcMnnXLMeGTiUXse84oTHjSsr%252DpBnlePDA5UmWm%255F%255F9gZ%255Fv2Db2PH0iz9gedue%252DLGHS6EKQqBh8%255FF4lfcyaJu5p%252DXNcgPFPqKkzD7IBYf7MXU%252D0evdIZSs4XE2q7%252D8GuVLFYENuGger%252DZIUWui2k%255FwS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl%252Dko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz%252D6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW%255FwwdCLsRZeVydQ%26access_token_ttl%3D1715276575463&sl=1&u=1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 0
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 245
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 65be9278-50b9-4e9e-a2b7-a13830a66b7f
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B80
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B80
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: C9257CEB76894A06A03CF0E8B5C73D6A Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:09Z
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/1033/osfruntime_strings.js
2.2 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (11667), with no line terminators
Hash a1d892f1368c7f3b1dfb75057b936b66
91ec4980bfa5b301199b574e6240a618247679f9
2db70125e37f651d09a6d03d593a65e09668e6267cca1257251328517f7eaefc
GET /officeonline/we/s/161763041001_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2223
last-modified: Tue, 30 Apr 2024 09:43:27 GMT
x-ms-request-id: 7df320f0-701e-0029-245f-9bc1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491559138,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848189.1d4c98e2&TotalRTCDNTime=4&CompressionType=br&FileSize=2223"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/sdxprefetcher.htm
200 OK 408 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161763041001_App_Scripts/sdxprefetcher.htm
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash d4bb84acc0c5f6e586f65ea7eb54b10e
30eafa7073618745e9e35b4d40e9239413c34892
523f7470b591600b5ae24f2b17dc50a55f151dade725fe0da1dc89003eeafff2
GET /officeonline/we/s/161763041001_App_Scripts/sdxprefetcher.htm HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html
last-modified: Tue, 30 Apr 2024 09:37:32 GMT
x-ms-request-id: 529d08aa-f01e-006a-285f-9b27bf000000
content-encoding: gzip
content-length: 408
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:09 GMT
alt-svc: h3=":443"; ma=93600
vary: Accept-Encoding
akamai-request-bc: [a=23.36.79.39,b=491559134,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848189.1d4c98de&TotalRTCDNTime=1&CompressionType=gzip&FileSize=408"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 4791
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 2ab74a00-24df-458f-856b-87b77e55afe5
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:08 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495
1.2 kB URL euc-word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b321ceaa-a86f-49d0-9ed0-345381eaad40
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002B82
x-wacfrontend: GVX0EPF00002B82
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 45D56321E0CA491D9D545491FFA88470 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:09Z
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
127 B URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 85b725a9cebb21968dc2c30db210eab2
581076a7ae675130d7e647ab0e991169b89a1b0c
cd2e7a598c3a13e9788a35eefb1d434b276653d5d9860f5ebbdee2badfb939d9
POST /we/OneNote.ashx?perfTag=EditorsTable_1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Length: 2228
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 127
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: eeb1bfe2-dc21-4504-bceb-ad43c74d9882, eeb1bfe2-dc21-4504-bceb-ad43c74d9882
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002AE9
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 86F5EDE35094440297AAB6B3312A7ED3 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:09Z
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
js.live.net/v5.0/wl.ms.js
16 kB URL js.live.net/v5.0/wl.ms.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JavaScript source, ASCII text, with very long lines (43338), with no line terminators
Hash c6ba4d44d3740688e6bdf01dace5b7eb
389a1825b6aad7cd758e2488ae1fcb3de2205dbb
d4c9bd86a5465d8414b7a10438d28110836126b387990d492fe545a5e701904a
GET /v5.0/wl.ms.js HTTP/1.1
Host: js.live.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 10 Jul 2020 18:30:22 GMT
Accept-Ranges: bytes
ETag: "0b3b92be856d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-MSNServer: bfd6775f7-zrjxd
X-ODWebServer: eurwesteur107255-odwebp
Access-Control-Allow-Origin: *
Date: Sat, 04 May 2024 18:43:09 GMT
Content-Length: 16221
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 294c2e37996d57f91f23aafd40bd0344
040bc55b5038c2d89595c14529a6300687260b0a
93c719dd8e531a8e3742db7a64bd3ccf951b5c142b1554180983b6a79041da83
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360,250a372c4a854d8fb120ef0366f9410c-dd39bcd8-3b38-4c6c-9f8d-3821e5c28b47-7487,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848189474
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 149625
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 271
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:09 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/we/s/161763041001_resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1475
content-type: text/css
last-modified: Tue, 30 Apr 2024 09:36:56 GMT
x-ms-request-id: 43faee19-e01e-0004-236b-9b7290000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491560283,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848190.1d4c9d5b&TotalRTCDNTime=1&CompressionType=br&FileSize=1475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/progress.gif
200 OK 695 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type GIF image data, version 89a, 24 x 24
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/we/s/161763041001_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 695
content-type: image/gif
last-modified: Tue, 30 Apr 2024 09:37:25 GMT
x-ms-request-id: 6b099468-301e-0065-305f-9b51d3000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491560288,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848190.1d4c9d60&TotalRTCDNTime=1&CompressionType=&FileSize=695"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/moe_status_icons.png
6.1 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/we/s/161763041001_resources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6140
content-type: image/png
last-modified: Tue, 30 Apr 2024 09:37:35 GMT
x-ms-request-id: 55ebdf73-c01e-005e-3e5f-9b1477000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491560291,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848190.1d4c9d63&TotalRTCDNTime=1&CompressionType=&FileSize=6140"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/agavedefaulticon96x96.png
1.1 kB URL res-1.cdn.office.net/officeonline/we/s/161763041001_resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/we/s/161763041001_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1115
content-type: image/png
last-modified: Tue, 30 Apr 2024 09:37:22 GMT
x-ms-request-id: 698d6de9-901e-0031-115f-9b1e84000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491560311,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848190.1d4c9d77&TotalRTCDNTime=1&CompressionType=&FileSize=1115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
202 Accepted 0 B URL POST HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,dmsactivityid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-allow-headers: content-type,dmsactivityid
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Sat, 04 May 2024 18:43:09 GMT
content-length: 0
X-Firefox-Spdy: h2
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
202 Accepted 7.9 kB URL POST HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash d47e44900d8ab8dc641de179deca864a
dd10c60dbd7a532ba25022d70b123632a0161a3d
ae4c088cbd5c345da6f79e755fc2f84b26bf9403f1d2167b6454db4dbd38dc2a
POST /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
Content-Type: application/json
DMSActivityId: 83dcae44-f81d-2ad2-928c-ded871f2ff14
Content-Length: 1391
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Sat, 04 May 2024 18:43:09 GMT
content-length: 7947
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=770dae44-f81f-ba8c-a472-7e7ec9b01a3b&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495
1.2 kB URL euc-word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=770dae44-f81f-ba8c-a472-7e7ec9b01a3b&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=770dae44-f81f-ba8c-a472-7e7ec9b01a3b&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: bcfdfe50-755d-47fb-80ae-bb809071aa39, bcfdfe50-755d-47fb-80ae-bb809071aa39
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97, cd466528-74d6-4650-925f-83b4ee71dc97
timing-allow-origin: *, *
x-officefe: GVX0EPF00002B82
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002BC5
x-wacfrontend: GVX0EPF00002B82
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2C31AC4E4B4E4C1BAC149B1E0E319F92 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:10Z
date: Sat, 04 May 2024 18:43:10 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:11 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 1726022baac7c76fb0a041a2384e6171
2cdaba52c83502b6188866022457ef959314ec64
d2ba9a155caea1fdd384effe29553a83493620e6e5b0aa4bbdfdb325a4659f6e
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,9783945ebc2b468fbb8a2890cdab903b-787355a5-74c8-4a89-b06a-9c82635d75fa-7162,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063
upload-time: 1714848190864
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 19706
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 303
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:10 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 68079
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 17940c9f-7c46-46a7-a9dc-3a8b0f76f00d
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF000AED56
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 10910C06E11E46CD9285DD8CC9DF7105 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:11Z
date: Sat, 04 May 2024 18:43:10 GMT
content-length: 0
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?cf83f00d_ae280a92_1714848191106
0 B URL store.office.com/gatedserviceextension.aspx?cf83f00d_ae280a92_1714848191106
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?cf83f00d_ae280a92_1714848191106 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 18:43:11 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-K0uwe/8A7rFGowycjZ7dSzrUuKjze2lP2o3ee+rPZFE=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: 5fb2a127476550e3e66f90c16c35726b
x-correlationid: 5fb2a127-4765-50e3-e66f-90c16c35726b
x-machine: OMEXNODES000005__omexexternal-prod-weu-000_5
x-buildversion: 24.4.10418.10727
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: c40a5a42-9791-4f51-88ec-a3d123a651d4
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes
1.2 kB URL euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8d2fcdad-ddc0-42e7-9d37-c066f14c597d
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B34
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002B34
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 79ED3F5ED1B24E8588CB2C953E80154B Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:10Z
date: Sat, 04 May 2024 18:43:10 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 1abf305d-1bf9-4b22-8706-aedcf98b8219
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 55917
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 9e8aa774-9b50-4e29-bb07-d7a42a32b9b0
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 501
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 92b93931-ce5b-4c3d-b40b-babbab2aff0c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:10 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:12 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 9e08087cf231c2cbe33aab4f1302352c
43f6ff82122a3558ab75ad9968b6d43e08cfaebd
8529dc2ea2aebc566e99d9415e11b3de98749b5c482c4c3d6b32ec2f6402fdad
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714848192560
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 12044
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 185
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:12 GMT
X-Firefox-Spdy: h2
res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
6.8 kB URL res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 6784, version 3.30147
Hash 14ec2d31f37bb0f43fd441d11e771d50
48f83a9581a5e37ad1ccd0d4848efc7fa64c17cf
43c551ea819a83b1100f566ecf6bd70db5a019f165d221200af2df11c4448627
GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6784
last-modified: Mon, 29 Jan 2024 20:39:52 GMT
x-ms-request-id: 4a04df69-b01e-0009-1616-54ba44000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491568235,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848193.1d4cbc6b&TotalRTCDNTime=1&CompressionType=&FileSize=6784"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2
33 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 32964, version 0.0
Hash 2c47175b890a2788244dbbb04fd15810
3e7a905849a1f7456361448b560e91c622980db4
c599144a6ee494d56d4622e7cc57873a3ba7b3413e525f3e3b4aa7d8298aa2ec
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32964
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 3559d8bf-c01e-0061-057d-d0dcd4000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491568233,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848193.1d4cbc69&TotalRTCDNTime=4&CompressionType=&FileSize=32964"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff
200 OK 14 kB URL GET HTTP/3 res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 13592, version 3.-32768
Hash 21cc8d639f8eb5b6ec27871007d5f7f4
f6425d1f545e5804c9b4f775a55ba97957067916
feed3199f66754edb85ef89823521f403da1a83d46d33369510906b4359c7f6e
GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13592
last-modified: Mon, 29 Jan 2024 20:39:47 GMT
x-ms-request-id: 4a630aeb-b01e-0009-5e1e-54ba44000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491568530,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848193.1d4cbd92&TotalRTCDNTime=1&CompressionType=&FileSize=13592"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: c2e2ed8b-20dd-47aa-809d-9854d6461447
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:13 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:13 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
403 Forbidden 1.2 kB URL GET HTTP/2 euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0c236d13-ac91-412f-9d0d-ceac68db8e8b
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B42
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002B42
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 06D29BFBF193480EB191A25068494056 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:10Z
date: Sat, 04 May 2024 18:43:10 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 9e08087cf231c2cbe33aab4f1302352c
43f6ff82122a3558ab75ad9968b6d43e08cfaebd
8529dc2ea2aebc566e99d9415e11b3de98749b5c482c4c3d6b32ec2f6402fdad
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 71cc1046851042108843d90e5d3ef6c1-61e5de5c-238c-4de5-95de-3b40d20ea6e5-6899
upload-time: 1714848193599
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 11046
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 521
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:13 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:14 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash ef0f1e86abcea815484d725cc84eaf0a
8553efd6c6ef4ad0fdf7f0bdd315fc85fc51515b
97ddcd65a8b30aa09572d50de9fc5bda15ea887401679ebbdf3031288fc09350
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714848194626
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 37541
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 619
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:14 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:15 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 2dc94820501ee5de7dc8497240ddeafa
0c593be95e73d99f78879d9a26cac18444ee23b3
5648352f3c8ad30e936fc11b3172cf94f2140fe15adb9fdfa9b8520a77641022
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848195778
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 22696
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 279
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:15 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.2/rawguids/26522609597
42 kB URL fs.microsoft.com/fs/4.2/rawguids/26522609597
IP
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 18 tables, 1st "LTSH", 52 names, Macintosh, Typeface � The Monotype Corporation plc. Data � The Monotype Corporation All Rights ReservedSymb
Hash f9a0f26b19317673d6d7c7beb43b37a2
a4970bc724026e3ea921a0f07126106ffbcd1e14
711861b52f2cb392f80ef61d0cfe05c7ed676345f99a0688c72dd989a5a51e0e
GET /fs/4.2/rawguids/26522609597 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Tue, 03 Apr 2018 00:05:17 GMT
ETag: "0x8DA1D3E730B616C0EB790AB8064F74717F1306B39F87C498BAA56673FD0F2CC0"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=26522609597; filename*=UTF-8''26522609597
X-Azure-Ref: 0zCCoYgAAAAClnfdDrKuJSouM2JgrLgFJTE9OMjFFREdFMDIwNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 42091
Cache-Control: public, max-age=103
Date: Sat, 04 May 2024 18:43:16 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
23 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 27 Apr 2024 20:37:57 GMT
x-ms-request-id: afa03159-201e-0046-6d40-9acb10000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491576826,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848196.1d4cddfa&TotalRTCDNTime=4&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
26 kB URL res-1.cdn.office.net/officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/hA88CFE8CCD11BE4C_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 27 Apr 2024 20:38:23 GMT
x-ms-request-id: a6d14e2d-101e-003f-33d3-9a3734000000
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491576867,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848196.1d4cde23&TotalRTCDNTime=4&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
36 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:16 GMT
x-ms-request-id: 20a081b5-201e-0024-651e-d00937000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491576880,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848196.1d4cde30&TotalRTCDNTime=4&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491576891,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848196.1d4cde3b&TotalRTCDNTime=4&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2
33 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 32964, version 0.0
Hash 2c47175b890a2788244dbbb04fd15810
3e7a905849a1f7456361448b560e91c622980db4
c599144a6ee494d56d4622e7cc57873a3ba7b3413e525f3e3b4aa7d8298aa2ec
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-bold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32964
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 3559d8bf-c01e-0061-057d-d0dcd4000000
cache-control: public, max-age=630720000
date: Sat, 04 May 2024 18:43:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491576951,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848196.1d4cde77&TotalRTCDNTime=4&CompressionType=&FileSize=32964"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:16 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash cfb70136cf464a8086f7eea9d46dce49
ccf5258bff5b3a1a62d1628646a4236445428a61
5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714848196664
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 18794
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 300
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:16 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
11 kB URL res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (49368)
Hash 668059a0ad862537a322d4651f639346
4db9ac8003b9172029d953fe41e789835e1f7bdd
b91087f2852920bbff9c4e029c154a5e90f5bde0f9f7044ace7d11d4b0f2344c
GET /officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10673
last-modified: Tue, 11 Apr 2023 08:47:02 GMT
x-ms-request-id: 832af903-b01e-0019-5f44-7d7f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491580571,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848197.1d4cec9b&TotalRTCDNTime=4&CompressionType=br&FileSize=10673"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
722 B URL fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash bcb0c4305749b10c7e9f428f8199caf5
b0afc5be5abe6f91286c5f15784ec25fb318badf
996a3022bdb1c69a264b5e164e4596169d81a91dc6114f7b971fbcd2a218e69c
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA75EDBF8D6FD6E64EC15A55BED859C6D856ED5E78B4556F6A89F2A5D9E7FAAD4"
last-modified: Wed, 24 Apr 2024 07:45:09 GMT
server: ECAcc (lpl/EF58)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 722
content-type: text/xml
cache-control: public, max-age=123092
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
10 kB URL fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 7696f8b035292f5d72f138d21671396b
0ae52f8d9004f77c6399f3db2a3053c8221c49d5
48afc1d5b0515029bc04d4c0365ecf286367f051f5f93356ade5d639ea866597
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000002.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xDE14F5441BD16FFD147B920AF1CB96A4E54190F739E2F90574B425A1076135CB"
last-modified: Tue, 05 Mar 2024 01:34:06 GMT
server: ECAcc (lpl/EF3E)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 9973
content-type: text/xml
cache-control: public, max-age=34861
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
1.5 kB URL fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e90570b9ba60d5c852fbe5ef17ac3538
5c1204b41de749cbd2da56abc2afd52d1e036ded
41c2b87ba4a89e79b898c09a2f7d520e9c98aab5c11fe937e640a46e72b26552
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000006.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 May 2023 22:57:41 GMT
etag: "0xE64D3D4DD5FB52AEF649F58F41B03E9A18AB236F359146E390AEAC833295DAEC"
accept-ranges: bytes
apiversion: Distribute 1.1
x-msedge-ref: Ref A: 74C7C982AFF34B2EA19D19C96AF94111 Ref B: LTSEDGE1907 Ref C: 2023-05-31T17:40:58Z
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=155557
date: Sat, 04 May 2024 18:43:17 GMT
content-length: 1460
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
14 kB URL res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (54497)
Hash 1e492e40049c2ff65b02b398b094f839
741ae0d5de13a5f31b1c2542795677e8fc8c708f
51814c1e404f7cac92c602596b8bf0c09dc468c0f5e2d69928939077635e0b1e
GET /midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13551
last-modified: Thu, 27 Oct 2022 16:58:37 GMT
x-ms-request-id: bcd1c63b-301e-0007-599c-5b93f4000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491580841,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848197.1d4ceda9&TotalRTCDNTime=4&CompressionType=br&FileSize=13551"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
892 B URL fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash c588e014a7a269c048b7f28d72220900
acc610bb4338b9207bfe8293df35c07bcab82648
03c6dd0c23b808ac239aaea3f3e8e7943128633d6048cede869cb2fe67a842e5
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000012.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x051054F2987E90D00D4AB37078BA6E1906843E6BF3516912E489171471812B0E"
last-modified: Tue, 26 Dec 2023 19:12:24 GMT
server: ECAcc (lpl/EF7C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 892
content-type: text/xml
cache-control: public, max-age=245266
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml
934 B URL fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 419e6c242dba4e71cefd42c01f0e91a6
82ef7dc0bf5c262ca2bea08573924a52d68624e3
43b556c798959900cb9ba58fd42b7cbc8551d833e8326f5d89dffe2885bcfbab
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000051.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xE5D03545D9719BFEEA6F808B21DE367DD61B95F0550EEBBBF36110625781D954"
last-modified: Tue, 30 Apr 2024 10:01:49 GMT
server: ECAcc (lpl/EF53)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 934
content-type: text/xml
cache-control: public, max-age=117847
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
4.7 kB URL res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14582)
Hash 8db72649caf05d1afb098a140f959321
8b744af169a965e23a4c1530e227f5d7b3647086
9ef8104de1a651ace27cd748d0a80ce668e3353f98a57cffd99a86ad9c7fae4c
GET /midgard/versionless/loggingdependencies_93278b946fd4334766a5.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4680
last-modified: Mon, 21 Nov 2022 14:21:52 GMT
x-ms-request-id: e6f25261-701e-0039-6f9c-5b048b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491580855,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848197.1d4cedb7&TotalRTCDNTime=4&CompressionType=br&FileSize=4680"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
774 B URL fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 506f01f02fe03f2844bf75380f6400b0
ae21f96c93c367afb5a11a0a9ea0f823bf318dbe
86b2af7758ef1bf4c43eb037b43064e130d9528e2890142ab1bda58e8cdcabd9
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000074.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Jan 2022 19:01:29 GMT
etag: "0x87722E389E5EEA4293E0C3FE0FD8D026B0B4D441923822E996090B9F64097695"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0QoKoYgAAAAD/v2EF/ClzT7JeJDKP8PkcTE9OMjFFREdFMTUxOABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=193773
date: Sat, 04 May 2024 18:43:17 GMT
content-length: 774
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
607 B URL fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash b105f6e9c6aa1cc3743b0afed2f68208
cb7ce1946647cf98eacf382b4a40efcbf6552cdb
c1d5cec2f2e208b33edf95459780a50b055a4302b45789dcbae466bc10dc8655
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000085.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Jun 2021 13:14:45 GMT
etag: "0x9A6E8947EAA5FEB8D55945344E0F9E15183088588574AF4A348E58DEA11018A0"
accept-ranges: bytes
apiversion: Distribute 1.1
x-ccc: GB
x-azure-ref-originshield: Ref A: 45A9F89529244642ACACEF9D406D593A Ref B: AMS231020616037 Ref C: 2023-08-03T21:14:58Z
x-msedge-ref: Ref A: B35E237ABF6B4998953F4C1F6328F90A Ref B: LTSEDGE0816 Ref C: 2023-08-03T21:14:58Z
x-azure-ref: 0wYSoYgAAAABdyw65xcJ8QLPqAkZM0TlRTE9OMjFFREdFMDIxNABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-encoding: gzip
content-length: 607
content-type: text/xml
cache-control: public, max-age=170012
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 7, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
726 B URL fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5afe7e5f67d7a7f2f730668a1560c2c0
00c7f4c49f72cacd2364039f052c31557af1deec
a878d169b063437be613a6f42c49283f299bfea063b3a124480545dbb3b0ba5f
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000029.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Jun 2019 10:02:20 GMT
etag: "0xB37202CB6635558936052D0FB47DA652F0126AB5C799C5CEDA7CEFD689CFAB49"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0wXinYgAAAAA2XVKsfc2TT7Vf80S3JjtITE9OMjFFREdFMDIxNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=47208
date: Sat, 04 May 2024 18:43:17 GMT
content-length: 726
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:17 GMT
X-Firefox-Spdy: h2
fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
647 B URL fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash a14c3949c1836fa3e4d41fae6e193533
2c5ac12c29ccdb630bc31473aa37625853ce177f
6768de051f32e94233d5fb12580b92586c5d516d1867b790bb77f4a3c53c3aad
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000059.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
apiversion: Distribute 1.1
etag: "0x04055EFA84D467751869A7732800EA33B320AEC7FF50A0270FD68CA76C1E376B"
last-modified: Mon, 06 Nov 2023 23:32:28 GMT
server: Kestrel
content-encoding: gzip
content-length: 647
content-type: text/xml
cache-control: public, max-age=43935
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
503 B URL fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5e6edc73470ff3e746bc8bdac6fb38b2
7dfa441d001fe0b50a5f6ed6102479662d2497df
71344c4aacbc26401dd2cfdcdb7c16625b423b4e710a0030a65d90b7e16f602d
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000110.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x4B895E43C1663E489850FC20D3E97389C5A0EEE9DBD7D5214B29C0484C6D0125"
last-modified: Mon, 04 Mar 2024 06:27:54 GMT
server: ECAcc (lpl/EF4C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 503
content-type: text/xml
cache-control: public, max-age=190237
date: Sat, 04 May 2024 18:43:17 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: be49560e-d375-4c4e-85e0-7e3e3490b971
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:17 GMT
content-length: 0
X-Firefox-Spdy: h2
fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.29007/en-us_web/manifest_web.xml
1.0 kB URL fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.29007/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text
Hash 6361125f88da5ad79615b988e02b0c73
fcdd14882b759ed4ee34ac1ac8ab338a853e62a4
74bea8988e533520807cacdecc1aff38c705d80641602a582c98749e70476325
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.29007/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x0812B9DB34FFFE13324CD4BF2B9D7FA65E491CD46B54959736EB3FFBB1A728D8"
last-modified: Thu, 02 May 2024 08:10:45 GMT
server: ECAcc (lpl/EF6B)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=48756
date: Sat, 04 May 2024 18:43:18 GMT
content-length: 1001
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
9.9 kB URL fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 4fee61f6dab5542b0bca78a0d52955be
5fec5fcd246d81e15b4c222785e1837fd66e5e27
0d57369177aada824d3e5d5488f7cf06da4e590c67adfc06260940340162a676
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000116.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x46C088B08547C754497DA95DE7E2DEBA67E8B34C2B283CDD7BCFF207EF9BB6B9"
last-modified: Thu, 29 Feb 2024 17:57:56 GMT
server: ECAcc (lpl/EF1F)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=146246
date: Sat, 04 May 2024 18:43:18 GMT
content-length: 9863
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
510 B URL fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 605c6bd48b2ab0262c0113445494ff4c
00cc6621252eb4930486f4837638a0524e5c77e9
405497ac72ada72a30277e2493a9b00b999df6ce1b425167b8c405af45ef0338
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000111.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA469F9CB0BD572336E79DA17C4D92777808887EC57EBF3B424F2A62F178652C6"
last-modified: Mon, 04 Mar 2024 06:23:27 GMT
server: ECAcc (lpl/EF53)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=168395
date: Sat, 04 May 2024 18:43:18 GMT
content-length: 510
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 37a032e85ae1b212255106f60eff93a9
d4932526175e6632c06c87539610d7e5ef467517
d0c3e6c8d25e655f19d3788bbf4982f52cba3498833d7d44ccf64e7e3f3de5a2
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848197808
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 7195
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 249
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:17 GMT
X-Firefox-Spdy: h2
fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml
911 B URL fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 4d4b25c5bf217201f2709ba7cad52fe3
ec61d7397c47b3e119fb6bb7fd6a93e3b40ad458
d38d1d7b9f270402de905852930f4aac616f132f383106b0fb5bbcfe543287df
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000145.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x6881D4B1660EA5A1838E5A7E963DB0BA66B4E87F588F1C898F85FF80103D2194"
last-modified: Wed, 01 May 2024 09:09:58 GMT
server: ECAcc (lpl/EF6B)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 911
content-type: text/xml
cache-control: public, max-age=209281
date: Sat, 04 May 2024 18:43:18 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-BrowserUlsBeacon: [{"Index":17,"MsSinceStart":21888,"Value":"DocumentCacheRemover.evictInvalidCacheEntries result: 0","Type":"RemoveInvalidDocumentCacheItem"},{"Index":18,"MsSinceStart":21888,"Value":"https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e67a6612-9985-4c48-bf05-71c98e246a8c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU5&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:17 GMT
content-length: 0
X-Firefox-Spdy: h2
wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
862 B URL wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 8cd6310c1f018cb9f32550ddae7b0770
7e0c7c73bb47bfcda53ca84f1def2b14e139123a
15e26c7d0c4f4deb349cf6aaba4908fcb74e59206d1fa595860b581e912201d3
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml HTTP/1.1
Host: wa104381125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 20:46:25 GMT
etag: "0x5B1FFB271A8FCC31E82D5365960926E0543BCFBCD84D2CB94E40003EB71E6894"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0oHSpYgAAAABOtWO+JFd/QLAOIaRKHaurTE9OMjFFREdFMDIxMABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=216130
date: Sat, 04 May 2024 18:43:18 GMT
content-length: 862
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714848198014&time-delta-to-apply-millis=use-collector-delta
0 B URL browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714848198014&time-delta-to-apply-millis=use-collector-delta
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714848198014&time-delta-to-apply-millis=use-collector-delta HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1164
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 522
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept, Content-Type, Content-Encoding, Client-Id
access-control-expose-headers: kill-tokens, kill-duration-seconds, time-delta-millis
date: Sat, 04 May 2024 18:43:18 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:18 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848198826
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2045
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 91
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:18 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1141)
Hash cb5cf9727488f6b50a475ae423e5c1ac
1b5c98d495c1483b5726f6babb7b657afcc99705
c187182ed90edcc51acf85eb324a07c53eb7f7a377480188dcf514f48d800026
GET /officeonline/we/s/hC187182ED90EDCC5_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8647
content-type: text/css
last-modified: Thu, 25 Apr 2024 21:33:47 GMT
x-ms-request-id: f6252218-b01e-0044-1036-9a75a8000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:20 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491587543,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848200.1d4d07d7&TotalRTCDNTime=4&CompressionType=br&FileSize=8647"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h610A24A457562CC5_resources/en-US/clientManifest.exp.js
32 kB URL res-1.cdn.office.net/officeonline/we/s/h610A24A457562CC5_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1825b40153c5096816e993f30b8dcdd5
f03164d9b7ea023400f9faccc378b8973bb0961d
610a24a457562cc529783b3645f4497826ae0af79959c26532d68f61ea88176a
GET /officeonline/we/s/h610A24A457562CC5_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32259
last-modified: Sat, 04 May 2024 03:09:50 GMT
x-ms-request-id: 93119264-801e-0060-75e4-9d8308000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:20 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491587544,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848200.1d4d07d8&TotalRTCDNTime=4&CompressionType=br&FileSize=32259"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7E0480A0B78C579A_App_Scripts/WordEditorDS.js
1.0 MB URL res-1.cdn.office.net/officeonline/we/s/h7E0480A0B78C579A_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (715)
Size 1.0 MB (1028413 bytes)
Hash d53a632ccbee3b832ab1de5eea9e833e
96935bafb3eb5b08cd42166b0d5a4d35186f9d02
7e0480a0b78c579a29e5dbca6fcd20183ea4687764f145002b2f70721ca86964
GET /officeonline/we/s/h7E0480A0B78C579A_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1028413
last-modified: Sat, 04 May 2024 03:02:52 GMT
x-ms-request-id: bf049ce2-a01e-0067-7ce4-9def6b000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:20 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491587542,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848200.1d4d07d6&TotalRTCDNTime=4&CompressionType=br&FileSize=1028413"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:20 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
403 Forbidden 1.3 kB URL GET HTTP/2 euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash a48215bb6af5b9e3ef5e3a488b1fde05
80ef6c7ad7a4b2c5f9a0ea99d0a63f94fca9c557
f434959cbbd0c0d28c39e2d5b445b97f6e00526c58c8a2f5d587856d3bd14e25
GET /we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1240aa96-3923-4655-bdcd-3b46bdbde220
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00014B69
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00014B69
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 234949FA1B2F45F3B49891C4D9DE1933 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:20Z
date: Sat, 04 May 2024 18:43:20 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes
1.2 kB URL euc-word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F4ff3c133a0979742%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 30ddd361-c9a1-44cc-a169-515488ace4cb
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B80
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-officefd: GVX0EPF00002B80
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D00B943B3BC540F7BCA35E7BFC4166A6 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:21Z
date: Sat, 04 May 2024 18:43:21 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 26327
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: cec6f3c2-29a2-49ef-a007-4b3963b13bb9
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:21 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:21 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h4A6DC91369B95AF2_App_Scripts/WordEditorDS.core.js
408 kB URL res-1.cdn.office.net/officeonline/we/s/h4A6DC91369B95AF2_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (3005)
Size 408 kB (408139 bytes)
Hash d67c196ad9308743a375a0737f45d182
76653ed1c5634184a321bb16415078fdec58b248
4a6dc91369b95af29a4317d019c1768bd1ebf4d7a6f0db32aa518aa656cb7742
GET /officeonline/we/s/h4A6DC91369B95AF2_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 408139
last-modified: Sat, 04 May 2024 03:02:03 GMT
x-ms-request-id: 4b58d336-b01e-0009-51e4-9dba44000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491592445,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848202.1d4d1afd&TotalRTCDNTime=4&CompressionType=br&FileSize=408139"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h276289659B0D47B5_resources/1033/WordEditor_version2.css
74 kB URL res-1.cdn.office.net/officeonline/we/s/h276289659B0D47B5_resources/1033/WordEditor_version2.css
IP
ASN #20940 Akamai International B.V.
Hash 7b48a0ce9afe56b2868abfa2bfb1d63e
8bcca24885fbbc662ee35614ddee490aba308855
276289659b0d47b57334f4855806029223228f7e2b09c91195e5422a129287e8
GET /officeonline/we/s/h276289659B0D47B5_resources/1033/WordEditor_version2.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 73568
content-type: text/css
last-modified: Wed, 01 May 2024 19:42:06 GMT
x-ms-request-id: 94300459-301e-0038-3de5-9d5b57000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491592559,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848202.1d4d1b6f&TotalRTCDNTime=4&CompressionType=br&FileSize=73568"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash ef0f1e86abcea815484d725cc84eaf0a
8553efd6c6ef4ad0fdf7f0bdd315fc85fc51515b
97ddcd65a8b30aa09572d50de9fc5bda15ea887401679ebbdf3031288fc09350
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714848201966
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 37619
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 139
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:21 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:22 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash cfb70136cf464a8086f7eea9d46dce49
ccf5258bff5b3a1a62d1628646a4236445428a61
5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714848202989
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 18800
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 85
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:22 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 423e9d5f-7fa0-4ec9-9644-58f665df6323
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:23 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
date: Sat, 04 May 2024 18:43:23 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
4.5 kB URL res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 458f661b-201e-0069-7e45-55c6db000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:24 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491598001,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848204.1d4d30b1&TotalRTCDNTime=4&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-OfficeVersion: 16.0.17630.41001
X-WacCluster: GEU10
X-WacFrontEnd: GVX0EPF00002B82
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: dG4/iH57Ijymof8+t/XjI6lOFUPKgrzSqSxsVBbkCM0=;C3HQR9iWmTgCGO+gay2Rc8VJKVzBZbjIemnp8Nv0tic=,638504449757406660
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ
X-AccessTokenTtl: 1715276575463
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57244
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 658ab07f-0042-4380-a7ca-9eb8fc87f927
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:24 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 2dc94820501ee5de7dc8497240ddeafa
0c593be95e73d99f78879d9a26cac18444ee23b3
5648352f3c8ad30e936fc11b3172cf94f2140fe15adb9fdfa9b8520a77641022
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714848204000
time-delta-to-apply-millis: 567
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 83293
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 58
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:23 GMT
X-Firefox-Spdy: h2
euc-common.online.office.com/suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
0 B URL euc-common.online.office.com/suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 606
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GEU8-ARRAffinity=8ca45e8d611daafa4bf58857a19ad150b38641bb6391490085200bb3bded58b5;Path=/;Domain=euc-common.online.office.com; samesite=none; secure
x-correlationid: e89dd852-3bdc-4939-b6f8-73116aafa38a
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0000B01F
x-officeversion: 16.0.17626.41001
x-officecluster: GEU8
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF000289E2
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: C7648F56D2FF44AFA0903C7AFC0CF678 Ref B: SVG20EDGE0308 Ref C: 2024-05-04T18:43:25Z
date: Sat, 04 May 2024 18:43:25 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
0 B URL euc-common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1 HTTP/1.1
Host: euc-common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1646
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GEU6-ARRAffinity=5c3dd18fd736d557c51d8ada7c22d62fad50b8891263792f5774f1625e6e0bc5;Path=/;Domain=euc-common.online.office.com; samesite=none; secure
x-correlationid: 2bad11d8-23ea-419a-a3bc-5955cd664b57
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0001F47A
x-officeversion: 16.0.17626.41001
x-officecluster: GEU6
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00024A89
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 69522E48FD6E423C8ACE39B0FA894920 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:25Z
date: Sat, 04 May 2024 18:43:25 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=
2.3 kB URL euc-word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9d75f322eecbb494df135544f93c455f
b5ce241c3d45284aff89e10459affa19bd525341
edb256c65aa285e2efdcbcb6a54f5224087660e58cdbb4d57d15ba79f671f683
GET /we/AppSettingsHandler.ashx?app=Word&usid=cd466528-74d6-4650-925f-83b4ee71dc97&build= HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2259
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a8f5a5f0-c0e8-4de2-b2d1-ba81f9afb05c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00020F79
x-officeversion: 16.0.17701.41001
x-officecluster: GEU9
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-officefd: PA1PEPF00020F79
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 61CBCAB8ADA3472FA375139A669803DE Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:25Z
date: Sat, 04 May 2024 18:43:25 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
0 B URL euc-word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion= HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 388
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 5db26d1e-0513-40aa-ad69-a073c29140dc
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00028A81
x-officeversion: 16.0.17701.41001
x-officecluster: GEU8
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 1C256AB414434430A374B2A3F5BE69EF Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:25Z
date: Sat, 04 May 2024 18:43:25 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Sat, 04 May 2024 18:43:25 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
200 OK 24 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&resid=4FF3C133A0979742!se97f2ef7dc9a407c98bf0cbd73f44d5e&cid=4ff3c133a0979742&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:13:52:4D:F8:B8:8D:5E:08:20:91:35:44:84:CB:86:54:85:BC:2D
ValiditySun, 17 Mar 2024 17:52:35 GMT - Wed, 12 Mar 2025 17:52:35 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D830b44bf0fbd492796586a8199aec6db%26HASH%3D830b%26LV%3D202405%26V%3D4%26LU%3D1714848178192&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714848205996
time-delta-to-apply-millis: 1987
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3066
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 43
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:25 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 61ea504e-a01e-002a-4867-7a2087000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:26 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491602877,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848206.1d4d43bd&TotalRTCDNTime=4&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wacBoot.min.js
44 kB URL res-1.cdn.office.net/officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 59319194d5b66da59ea186401e5a5133
71783be444a88b1b07c08242bb8bb5239f28f6c1
734f769abda6e0d50df5080ddccc92b4383c7de5f7779905841fe1b32619f3d1
GET /officeonline/we/s/h734F769ABDA6E0D5_App_Scripts/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43670
last-modified: Fri, 26 Apr 2024 20:32:24 GMT
x-ms-request-id: 5ef11b36-d01e-0042-3b36-9a4617000000
content-encoding: br
cache-control: max-age=630720000
date: Sat, 04 May 2024 18:43:28 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=491607851,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714848208.1d4d572b&TotalRTCDNTime=4&CompressionType=br&FileSize=43670"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
0 B URL euc-common.online.office.com/suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&officeserverversion=20240502.1 HTTP/1.1
Host: euc-common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 580
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: GEU6-ARRAffinity=5c3dd18fd736d557c51d8ada7c22d62fad50b8891263792f5774f1625e6e0bc5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GEU2-ARRAffinity=fc0b4088b42224fdd445f7c7d91acc1ce2a555c4abe53b49e410e797145c6b11;Path=/;Domain=euc-common.online.office.com; samesite=none; secure
x-correlationid: 147ec8fd-5725-42d0-b7c0-d096c5f32a2f
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF00019BBA
x-officeversion: 16.0.17626.41001
x-officecluster: GEU2
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF00006A09
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: C976DF85BF8C43F2AA168AAF6AD02639 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:28Z
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://euc-word-edit.officeapps.live.com/
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 25a75898-3709-4391-aa27-f197928b3e3b
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
200 OK 0 B URL POST HTTP/2 euc-word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU5 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 5705
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 43923ab0-2559-41a4-bcca-f12678f228cd
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BE29
x-officeversion: 16.0.17630.41001
x-officecluster: GEU5
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: BA9436403775485E8CC3FB3D3FB792F0 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:28Z
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU5&usid=cd466528-74d6-4650-925f-83b4ee71dc97 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
X-UserSessionId: cd466528-74d6-4650-925f-83b4ee71dc97
X-BrowserUlsBeacon: [{"Index":18,"MsSinceStart":32525,"Value":"SessionExited","Type":"SessionBoundary"},{"Index":19,"MsSinceStart":32525,"Value":"https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: c48160cd-cd1c-4c92-b7f1-da26182c31b3
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU5&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13623
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-word-edit.officeapps.live.com/
Cookie: MC1=GUID=830b44bf0fbd492796586a8199aec6db&HASH=830b&LV=202405&V=4&LU=1714848178192; MS0=9ee6a5badeda42cea563811d9c832ed2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 28
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Sat, 04 May 2024 18:43:27 GMT
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
122 B URL euc-word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /we/WsaUpload.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 13386
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b76c21a7-3923-415a-a35e-7c785f5ed63c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002BB6
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
x-officefd: GVX0EPF00002BB6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 146560786E9D4762AAA1CF963FF478FE Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:28Z
date: Sat, 04 May 2024 18:43:28 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
0 B URL euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 12563
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 2a1af2f2-2b99-4393-b1ad-207db8fead4c
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
0 B URL euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17630.41001&waccluster=GEU10&usid=cd466528-74d6-4650-925f-83b4ee71dc97&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&haep=1 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 60097
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: aa62c9c0-b1ec-472f-a08e-68539607e4ff
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF00008004
x-officeversion: 16.0.17701.41001
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://euc-word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=GEU10&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF00008004
set-cookie:
date: Sat, 04 May 2024 18:43:28 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-edit.officeapps.live.com/we/OneNote.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&haep=1
116 B URL euc-word-edit.officeapps.live.com/we/OneNote.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ4NDgxNzUiLCJleHAiOiIxNzE1Mjc2NTc1IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIyYzg5NjRmMzQxZWNiYzMzNjY5NTMyZjg5MWU2NzU1ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiZTk3ZjJlZjdkYzlhNDA3Yzk4YmYwY2JkNzNmNDRkNWU7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2NkNzVjMmQ0MGNmMzQ3YzE4NmIwNzQ3YmYzYWE5ZTRiOztUcnVlOzs7MzkwODs3NjcxMjVhMS0yMGJhLTgwMDAtYmVjYy05OGI2YjY4ZWNlM2QiLCJmaWQiOiIxODk2NzIifQ.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash bf90362096d3dbc85ba2824253c2f68d
2420dcde407737cc4c8856b115afbd5e46088483
6df862c666969d5c2da7dd4bf813e3c7c24a02d583c05efbff575f96debf7291
POST /we/OneNote.ashx?usid=cd466528-74d6-4650-925f-83b4ee71dc97&build=16.0.17630.41001&waccluster=GEU10&WacUserType=WOPI&ckey=dG4%2FiH57Ijymof8%2Bt%2FXjI6lOFUPKgrzSqSxsVBbkCM0%3D%3BC3HQR9iWmTgCGO%2Bgay2Rc8VJKVzBZbjIemnp8Nv0tic%3D%2C638504449757406660&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.gHH1bcMnnXLMeGTiUXse84oTHjSsr-pBnlePDA5UmWm__9gZ_v2Db2PH0iz9gedue-LGHS6EKQqBh8_F4lfcyaJu5p-XNcgPFPqKkzD7IBYf7MXU-0evdIZSs4XE2q7-8GuVLFYENuGger-ZIUWui2k_wS1HhK7ox5M9DoN1dmuusHN5oj6w0pJkgMcl-ko4kT2t0amceDcvPoyLEm0A5IX2ziC7VtO19PxHJAOGwBBeguAHufj8pz-6gfoaiGLBpbpmxriIzulfSqKk3SlLKNoISehsCHFGPuntS3fjfW4o0ZW0N9aGPt3g94ZLdCmiIZ7pECWW_wwdCLsRZeVydQ&access_token_ttl=1715276577495&haep=1 HTTP/1.1
Host: euc-word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F4ff3c133a0979742%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fe97f2ef7dc9a407c98bf0cbd73f44d5e&wdenableroaming=1&mscc=0&wdodb=1&hid=%2BPPNx1qM0km9vRy7YKyCaQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy80ZmYzYzEzM2EwOTc5NzQyL0VmY3VmLW1hM0h4QW1MOE12WFAwVFY0QjZEOFRPdzJ0SjM3M1lienREcG13UlE_ZT1WaVF6eDQ%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=cd466528-74d6-4650-925f-83b4ee71dc97&usid=cd466528-74d6-4650-925f-83b4ee71dc97&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2106
Origin: https://euc-word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:1uewAWps3Ig=:eqqtejOzucz6jiht+GDw+RI9In60qzN2P2L1cDnZFJE=:F; xid=b8fc9722-c989-4c02-9fcd-800112d163c8&&ODSP-ODWEB-ODCF&164; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714848186545_0.8480182891058357; GEU10-ARRAffinity=a984b6878c65590eced56c82f43f6460100c528f528708bd6d7e398a2f161f19
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 116
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: adc8c3ce-b9c5-45fc-9b09-2cb6caeb4794
x-usersessionid: cd466528-74d6-4650-925f-83b4ee71dc97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00002B3C
x-officeversion: 16.0.17630.41001
x-officecluster: GEU10
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00002B3C
x-wacfrontend: GVX0EPF00002B3C
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2AACB11BBD0F43439D82D839F9BD4601 Ref B: SVG20EDGE0319 Ref C: 2024-05-04T18:43:28Z
date: Sat, 04 May 2024 18:43:28 GMT
X-Firefox-Spdy: h2
13.107.42.12
23.38.201.99
13.104.158.180
52.108.240.5
51.132.193.105
52.111.209.16
20.190.177.19
0.0.0.0