1drv.ms/p/s!AqOOT_UlH-t-gQzJSLD1Il8iMOY1?e=sZshgI
0 B URL 1drv.ms/p/s!AqOOT_UlH-t-gQzJSLD1Il8iMOY1?e=sZshgI
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/s!AqOOT_UlH-t-gQzJSLD1Il8iMOY1?e=sZshgI HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?resid=7EEB1F25F54F8EA3!140&authkey=!AMlIsPUiXyIw5jU&ithint=file%2cpptx&e=sZshgI
x-msnserver: DB3PPF9ABF3D46C
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: HTp529rgGkO2UDY0zjdeFQ.0
x-asmversion: UNKNOWN; 19.1381.322.2019
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7DD037A6DC5D461094610CBE8C9D3981 Ref B: OSL30EDGE0122 Ref C: 2024-04-25T04:00:00Z
date: Thu, 25 Apr 2024 03:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?resid=7EEB1F25F54F8EA3!140&authkey=!AMlIsPUiXyIw5jU&ithint=file%2cpptx&e=sZshgI
264 B URL onedrive.live.com/redir?resid=7EEB1F25F54F8EA3!140&authkey=!AMlIsPUiXyIw5jU&ithint=file%2cpptx&e=sZshgI
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash b615513ae9eecdd4a7f88bfc3631db36
16defcf32e21674c02cdf0161c3facca027a5aa6
eac3d278e89297eef615a60ec51da229a6b032a93bd45cde336e7af96930daa7
GET /redir?resid=7EEB1F25F54F8EA3!140&authkey=!AMlIsPUiXyIw5jU&ithint=file%2cpptx&e=sZshgI HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 264
content-type: text/html; charset=utf-8
expires: -1
location: /edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
set-cookie: E=P:gVITLtxk3Ig=:wktEJiBzE7IpAhQoXyNhh5vOu/CNH40+eBT6j3E20wc=:F; domain=.live.com; path=/
xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 25-Apr-2024 02:20:00 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 795f98b668-r88db
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 3E049466BF3E41C0B73C681E813B8243 Ref B: SVG20EDGE0109 Ref C: 2024-04-25T04:00:00Z
date: Thu, 25 Apr 2024 04:00:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h25FD28BFF140E152_resources/1033/FavIcon_Ppt.ico
7.9 kB URL res-1.cdn.office.net/officeonline/pods/s/h25FD28BFF140E152_resources/1033/FavIcon_Ppt.ico
IP
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash f44c23dac7704917fe87b03c3288e5a7
8e38722240f85eed5ba78b4e4692b6890ac629d4
25fd28bff140e1521f3d4cdd797ecd5519d726d8bc825b7fd5516c2fe7a12405
GET /officeonline/pods/s/h25FD28BFF140E152_resources/1033/FavIcon_Ppt.ico HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Sun, 21 Apr 2024 00:45:01 GMT
x-ms-request-id: 4be106d7-201e-0069-5a87-93c6db000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370661666,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017602.1617d922&TotalRTCDNTime=2&CompressionType=&FileSize=7886"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
191 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (36211)
Size 191 kB (190595 bytes)
Hash 83c28bc9280bff98c404aa9eadaa67ee
fe235fa5b4d836ffa9d8a10e7b76da1af6289390
90b2fafd05da9eae5c5f3c11a7b665ff3744899cc53c7aa823825d302ca1cf63
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 190595
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: 39b9da2e-601e-0047-47dc-9494cc000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: FA1BFFE6E12A97BAA5CC65A0936960BB2D124103183D653C659338CABD538F8E00
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370661665,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017602.1617d921&TotalRTCDNTime=4&CompressionType=br&FileSize=190595"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
200 OK 353 B URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (351)
Hash 31c05f8e27abe3f85548a4c9735da1c4
306e842778d688f377166b13ad0b695b035d42eb
c31b75d03121f2238e3f54b375534e141b2844ccd01c2e9d22412b154ff9ac50
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 353
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: 8cc62c90-a01e-0015-1cdc-94e824000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 7A4B57CC16D96BA3C1F929248F196219900A9883F9728999400DC133C90567ED00
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:02 GMT
akamai-request-bc: [a=23.36.79.39,b=370661669,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017602.1617d925&TotalRTCDNTime=3&CompressionType=br&FileSize=353"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
39 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65476)
Hash 7e8696b25a28fb4e7ea773a68aa8dfe5
2f29d7054388390d0040a5bfd2e6bc02d0a759a6
2abca138c3c22fb15ec89db558736331b6afc0ff557a55b4d2fadab6116cc877
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 38697
last-modified: Sat, 20 Apr 2024 06:22:14 GMT
x-ms-request-id: 24b09832-201e-0056-79dc-940e78000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 23FB0AD6A406C190F5D7D5100518A7C92596D259DABDA4709E47DF5E3FB508D200
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
akamai-request-bc: [a=23.36.79.39,b=370662744,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617dd58&TotalRTCDNTime=6&CompressionType=br&FileSize=38697"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=6, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/10/manifest.js
2.7 kB URL wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/10/manifest.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5825)
Hash 3f689e0da18a51bc2349f619506c8388
3a3b51bb0e8d5c085b9f30d1f1da0a88c094e3fb
1b614eeb1c42803ca31c6c52bdc272318ab6a410a25772016d73d37213c25abc
GET /wise-m/owl/5mttl/production/10/manifest.js HTTP/1.1
Host: wise-m.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2681
last-modified: Tue, 23 Apr 2024 18:43:29 GMT
x-ms-request-id: e23afc32-801e-002d-5fae-954ce4000000
content-encoding: br
cache-control: max-age=300
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370663775,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e15f&TotalRTCDNTime=2&CompressionType=br&FileSize=2681"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0 , cdntime; dur=1
akamai-cache-status: RefreshHit from child, Miss from parent
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
48 kB URL wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 5d885ac5e9957fa7fc2e12b8d8bfe27f
7869dc6df5c92ecec4825ba355a334d0065e3dbd
0f67723c2a54546380dd9cd6d77265902e973cb35455fb9d08f3ceb3fc62d1bd
GET /wise/owl/owl.slim.43b32de0474de28993ac.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47462
last-modified: Tue, 23 Apr 2024 05:28:05 GMT
x-ms-request-id: 15714fd3-101e-005d-3d40-95f513000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370664075,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e28b&TotalRTCDNTime=2&CompressionType=br&FileSize=47462"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/powerpoint.app.boot.4c11c25adc0b4ee4ce0d.js
41 kB URL wise.public.cdn.office.net/wise/owl/powerpoint.app.boot.4c11c25adc0b4ee4ce0d.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 103948b766255dc5873ef549fc619f3c
328ee472af1f0907f682c70875c283f1bf7757c4
3a370decbe481ecdec28ca2bf5046230edc1dd2e7b04f35b959c582b552f2e73
GET /wise/owl/powerpoint.app.boot.4c11c25adc0b4ee4ce0d.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 40596
last-modified: Tue, 23 Apr 2024 05:28:05 GMT
x-ms-request-id: 96145740-501e-0001-7142-95a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370664232,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e328&TotalRTCDNTime=3&CompressionType=br&FileSize=40596"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 712
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=b6284758b3d0db8d75752a40bf6cf6a6372cc1e2f7515f6a6649df417e6e1b96;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 50899e8c-43cc-4436-80a2-9bc169994be5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D756
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E8
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6CF216B17FD948B3AD6983BC9F11100C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:03Z
date: Thu, 25 Apr 2024 04:00:03 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 115
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 81444a87-6826-4636-822c-154d1b3e6c10
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 5ddfeaa4-5f40-4efb-a200-a0ed72c15a4a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com, https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 9399CAA8BA5D4481981B0159BE8F1460 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:03Z
date: Thu, 25 Apr 2024 04:00:03 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css
200 OK 76 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (36135), with CRLF line terminators
Hash fc3687b9c1d998a396e384a6f5c42dd1
a756fe2b29dfb1da2c14f0e6fd216fc7fd5ed6ed
27d7bd6a83ab42fb97b47ed1e531cea5821e2841ab364392c2ff601c51d78d84
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76469
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:33:50 GMT
x-ms-request-id: a00c1ee0-e01e-0004-1151-967290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370665588,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e874&TotalRTCDNTime=3&CompressionType=br&FileSize=76469"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hCFD244C28D3E9AB4_PptScripts/ppteditDS.precore.js
29 kB URL res-1.cdn.office.net/officeonline/pods/s/hCFD244C28D3E9AB4_PptScripts/ppteditDS.precore.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (612)
Hash 06c5f4cf4b8c144c652010bddd76cf9f
f1dd4c22b4e03179ae29c5f979baff8237839f1e
cfd244c28d3e9ab4ba3d46ded6aff45dc1a21851bce7b5d0e683eebb2c0ef040
GET /officeonline/pods/s/hCFD244C28D3E9AB4_PptScripts/ppteditDS.precore.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29382
last-modified: Thu, 11 Apr 2024 04:45:38 GMT
x-ms-request-id: 2d44db87-c01e-004e-3658-8ed11f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370665652,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e8b4&TotalRTCDNTime=2&CompressionType=br&FileSize=29382"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h9BE35C404C06C942_PptScripts/1033/powerpoint-ribbon-intl.min.js
113 kB URL res-1.cdn.office.net/officeonline/pods/s/h9BE35C404C06C942_PptScripts/1033/powerpoint-ribbon-intl.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 113 kB (112975 bytes)
Hash 501077ee9d10c337bedb0e653ff31354
4a506b06ece08e7b7f353b3f664e0a90451c7567
9be35c404c06c9420309408173a481b5d1716d833905a8ef4506ffbfd766b759
GET /officeonline/pods/s/h9BE35C404C06C942_PptScripts/1033/powerpoint-ribbon-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 112975
last-modified: Thu, 18 Apr 2024 16:14:15 GMT
x-ms-request-id: 66192719-301e-0017-7019-94569c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370665659,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e8bb&TotalRTCDNTime=2&CompressionType=br&FileSize=112975"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js
200 OK 515 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 515 kB (514607 bytes)
Hash c658bb8674897e74b2abbc48f7833231
53caf3d93d8395d87e7134a4a409cd094b11f4c8
f9c7e923a7351d488da5e831c1e1596cdeaf7e82d16e05220403a10c5612a44b
GET /officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 514607
last-modified: Thu, 11 Apr 2024 04:58:52 GMT
x-ms-request-id: a9258965-701e-0016-3140-8d0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370665677,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e8cd&TotalRTCDNTime=2&CompressionType=br&FileSize=514607"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js
85 kB URL res-1.cdn.office.net/officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 4adf481971ed3a057a5a1db09804095b
54a336b9069e7e99ad18b4e38861bf72ae095840
26dfc02c858d4d2310aaf6054c5988ff12060cc7eac3bc3c835bef55e86485fe
GET /officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 85261
last-modified: Thu, 11 Apr 2024 04:51:31 GMT
x-ms-request-id: 2823a0f3-301e-005a-663a-8f9970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370665686,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017603.1617e8d6&TotalRTCDNTime=2&CompressionType=br&FileSize=85261"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
24 kB URL res-1.cdn.office.net/officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 77c9684211102d592d9c2e042c24dade
0a03c6b4e4ed441d584c28de29ec78b797ed2792
bcd659260529ea730ba14b8ae4455f7e8bd97ca98fc262ca89a21563d33da58c
GET /officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23700
last-modified: Fri, 19 Apr 2024 01:22:50 GMT
x-ms-request-id: 31f4a5e3-301e-0038-43f9-915b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370666112,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617ea80&TotalRTCDNTime=2&CompressionType=br&FileSize=23700"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js
4.7 kB URL res-1.cdn.office.net/officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (16861), with no line terminators
Hash 204f32119407fc2c32dc46dd9f4fc4d0
256a4f6ed80fee3f1a4e9891a0d965509665e52b
9278a7018cd2143f8dcc6ae1c4d69ddd4eb2c1cb3bba599f08f816c6b3ead3bb
GET /officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4705
last-modified: Sat, 20 Apr 2024 10:20:02 GMT
x-ms-request-id: 50101c63-701e-004b-0f35-9303c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370666120,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617ea88&TotalRTCDNTime=2&CompressionType=br&FileSize=4705"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h00D07093E2DAEB13_PptScripts/1033/HermesIntl.js
78 kB URL res-1.cdn.office.net/officeonline/pods/s/h00D07093E2DAEB13_PptScripts/1033/HermesIntl.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65507), with no line terminators
Hash 79a71c68ea4fdca6270330652479a230
f3861e070b44740e5b5f600995dc8bb39b2946d4
00d07093e2daeb13a60b3432247be594d4f64d27d4ab7ab02dc0bfebe1696af3
GET /officeonline/pods/s/h00D07093E2DAEB13_PptScripts/1033/HermesIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 78497
last-modified: Thu, 11 Apr 2024 04:49:40 GMT
x-ms-request-id: 3488e9d5-c01e-005e-73d5-8d1477000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370666125,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617ea8d&TotalRTCDNTime=2&CompressionType=br&FileSize=78497"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h38559763515F0307_PptScripts/wp5/appResourceLoader.min.js
4.1 kB URL res-1.cdn.office.net/officeonline/pods/s/h38559763515F0307_PptScripts/wp5/appResourceLoader.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (13525)
Hash f48e42a0468cc0297fa9bfe228655e54
a9e7235491e1455fffb8eee6aa733e78f3fc5dc9
38559763515f03071a381a22bd05eda5896540536832e9b8f507318b69a68c00
GET /officeonline/pods/s/h38559763515F0307_PptScripts/wp5/appResourceLoader.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4052
last-modified: Thu, 11 Apr 2024 04:48:47 GMT
x-ms-request-id: 0dcc1110-101e-0000-3a26-8fff97000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370666160,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617eab0&TotalRTCDNTime=2&CompressionType=br&FileSize=4052"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 8368
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 43509a18-b55d-4303-9f7d-6c3bd0c9edb4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: BN3PEPF000037DE
x-officeversion: 16.0.17615.40511
x-officecluster: PGTUS3
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: c01daffb-6798-4abf-85d5-e9326b593adf
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTUS3&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000037DE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_powerpointslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0FF7040BE9AA4EE4A2D1A7C63A6A687D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:03Z
date: Thu, 25 Apr 2024 04:00:04 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css
3.2 kB URL res-1.cdn.office.net/officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF, LF line terminators
Hash bcf7eeae02732aeb91853c17b36b1fe6
3419ab619ead7a239a7201124165cd79776df5f2
0d7225f4e791eddbd67465e8ec91e3b0e825b0bbd3ce555f295330e94875723a
GET /officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3243
content-type: text/css
last-modified: Sun, 21 Apr 2024 06:00:44 GMT
x-ms-request-id: 1aeb621f-c01e-0013-7dae-95db9b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668539,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f3fb&TotalRTCDNTime=3&CompressionType=br&FileSize=3243"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js
159 kB URL res-1.cdn.office.net/officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (764)
Size 159 kB (158561 bytes)
Hash 4bf3d150d53b4dd127cfe43980536f6d
428e716f63d3c7df09a45dce0f480546f036db15
0713d7aa72bb0bd4aa96098f94fd4b78fe0d1a1ebc1c21d55998f58cf073a87d
GET /officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 158561
last-modified: Thu, 11 Apr 2024 04:44:26 GMT
x-ms-request-id: 548daf38-001e-0033-472f-8fa03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668540,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f3fc&TotalRTCDNTime=2&CompressionType=br&FileSize=158561"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js
200 OK 340 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (610)
Size 340 kB (340543 bytes)
Hash 9732cf77ba722fab236d1a67fa7bbc10
fc5caff2b6bcfddd6cd693ac3f5ea2a4eed28aaf
11eecb354ed22be4a054a42c2872f1a5ed30a2321c2df8cfca890f1034507b2b
GET /officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 340543
last-modified: Thu, 11 Apr 2024 04:43:19 GMT
x-ms-request-id: fa1761b7-701e-004b-0b58-8e03c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668541,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f3fd&TotalRTCDNTime=2&CompressionType=br&FileSize=340543"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js
444 kB URL res-1.cdn.office.net/officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (669)
Size 444 kB (444329 bytes)
Hash 8a982260baee7f70d37785bc740b9e7b
e8a81549380b1220a5b66bf046758700c7228125
21e8176126d407f29f242257faab84306553eaf68a8a7dacd86f845e6e07cd31
GET /officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 444329
last-modified: Thu, 11 Apr 2024 04:43:18 GMT
x-ms-request-id: 541b6b5d-a01e-0067-7258-8eef6b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668542,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f3fe&TotalRTCDNTime=2&CompressionType=br&FileSize=444329"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h7555CD185371BD79_PptScripts/slidegrid.min.js
28 kB URL res-1.cdn.office.net/officeonline/pods/s/h7555CD185371BD79_PptScripts/slidegrid.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 872242124afbd2d8c72cfd32b3d5eaa7
ddb5959759de2947eaa51240dedda14e115fa7a7
7555cd185371bd79dc0933c4dbb6c62ea43ca602ab456f459c6ae52b34823ad9
GET /officeonline/pods/s/h7555CD185371BD79_PptScripts/slidegrid.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28335
last-modified: Thu, 18 Apr 2024 07:31:33 GMT
x-ms-request-id: 33a40b99-301e-0038-4d38-925b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668543,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f3ff&TotalRTCDNTime=2&CompressionType=br&FileSize=28335"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js
200 OK 25 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash da5ce5235e8fa8dc10b0d43f65db6c36
216be83114c625d870e4cae5f992e733dfd227be
dd0b5742bfcc869613c22bab0007f5202384a7c85bfad4731e8972bd62be1cba
GET /officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24789
last-modified: Thu, 11 Apr 2024 04:57:20 GMT
x-ms-request-id: 00785b62-501e-005c-43fb-8faacf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668546,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f402&TotalRTCDNTime=2&CompressionType=br&FileSize=24789"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?openEarly=true
5.6 kB URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?openEarly=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash a0c8716ea2146aa4c41b1236cb569090
682899d8c825448430711ae3db03c6d8178a9598
1ca5c1b7379bf8be9c8c5841fdec42725e73bb0e2fa2838f2ed209136e8e82a3
POST /pods/PowerPoint.ashx?openEarly=true HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Content-Type: application/json; charset=utf-8
Pid: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
si:
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-UserType: WOPI
X-WacCluster: PNL1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
SlideWidth: 1004
SlideHeight: 820
DevicePixelRatio: 1
PostData: {"Mode":4,"srs":[[1,{"SlideID":"0#0","OperationId":1}]]}
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 5620
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: aa087b5a-5127-479a-a2f3-122f053668b8
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 804a65da-868b-4f2f-915f-e457bc1862d3
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-getcellservertelemetry: {"OpenEarlyServerReceivedTime":"1714017605423","OpenEarlyServerFoundBaseDocTime":"1714017605423","OpenEarlyServerEndTime":"1714017605439"}
x-boottelemetry: {"documentFlushTime":1714017605439,"downloadStartMs":1714017603845,"downloadEndMs":1714017604251,"downloadSize":80957,"incDownload":false,"bootStartMs":1714017603814,"bootEndMs":1714017604564,"officeAppEndpoint":"PNL1","officeServerVersion":"16.0.17607.40507"}
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0F7C07877D8C47C8A385C1BB0F12C4C7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:05Z
date: Thu, 25 Apr 2024 04:00:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js
935 kB URL res-1.cdn.office.net/officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1775)
Size 935 kB (935105 bytes)
Hash 66fc518142869a987fb20d018877a714
ee7c3225c67d227a8cabeea7d2dd746c8024a17e
d47ae170d8d5d27090e7cf07a12ce0d72a1db060cac0128594ddf4658eae5260
GET /officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 935105
last-modified: Thu, 11 Apr 2024 04:45:16 GMT
x-ms-request-id: 3351c2ba-901e-006c-5658-8e1400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370668544,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017604.1617f400&TotalRTCDNTime=2&CompressionType=br&FileSize=935105"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?dSlide=true
13 kB URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?dSlide=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 5fa22fe04920bacd4f28cf2e0b2bd52e
dcb9ae419d6eb29596862d7a5a8355c36fcdf050
d67e7b9391da16e5b64bb24b044ec5f38c6915b59b2fa93587f768ccbaff1a41
POST /pods/PowerPoint.ashx?dSlide=true HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Content-Type: application/json; charset=utf-8
Pid: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
si:
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-UserType: WOPI
X-WacCluster: PNL1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
SlideWidth: 1004
SlideHeight: 820
DevicePixelRatio: 1
PostData: {"Mode":4,"srs":[[89,{"SlideID":"0#0","IsBootRequest":true,"RequestType":0,"OperationId":1}]]}
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 13350
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 41c7cde5-b5ba-4eba-9378-3fb36414ce0d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 1c716e1d-67d7-4a2a-8cc7-4ee7fd1aa4d3
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 5A29A39AD10948F0A82C7F85076FAD5D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:05Z
date: Thu, 25 Apr 2024 04:00:05 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
200 OK 40 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d661f0d16f977cd90e9b16ef442eb18e
a4ff3fb2bb54c3499642895596cd5bc297591e9b
26c6dc95ebf7c6c152ee4b64faca6ad63d76942534893d7fb3a9c5e88dc8d446
POST /pods/podedit.svc/jsonAnonymous/GetThumbs HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Content-Type: application/json; charset=utf-8
Pid: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-xhr: 1
X-UserType: WOPI
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-Requested-With: XMLHttpRequest
isBootRequest: true
thumbnailPaneHeight: 873
thumbnailPaneWidth: 0
deepLinkSlideIdx: 0
Content-Length: 418
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 40219
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b4e5076f-2167-475b-b669-61ae2951691a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 10950746-6661-4eb2-979a-a1db7220f0ee
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 23A13905056544C6B68DB178660F929C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:05Z
date: Thu, 25 Apr 2024 04:00:05 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?minimalboot=true&version=1714017605048&sync=true&index=0&Iid=pres%2Finfo&Iid=sld0%2Ffs
44 kB URL powerpoint.officeapps.live.com/pods/images.ashx?minimalboot=true&version=1714017605048&sync=true&index=0&Iid=pres%2Finfo&Iid=sld0%2Ffs
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 1fafd64f9d44fa75423f5c7e45bbe20c
3ae3a77cd4e5381f7eb7424eb35ff44bb571f707
d26646f588076f1110746d1a4fe1c220d83e0457a790e526fb96151b26dcd191
GET /pods/images.ashx?minimalboot=true&version=1714017605048&sync=true&index=0&Iid=pres%2Finfo&Iid=sld0%2Ffs HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Pid: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-UserType: WOPI
X-WacCluster: PNL1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
mbs: NotLoaded
X-Requested-With: XMLHttpRequest
NewWrsImgStoreEnbld: true
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 44450
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "57494095"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0a2634ab-11e5-460b-ba0b-22edf05fa0d8
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 11806c54-65c7-4aa1-a242-c3f241ad521d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
mbs: FirstRequestFromOnDemand
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 77458B2814444A17B1ED94AF38D1B586 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:05Z
date: Thu, 25 Apr 2024 04:00:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js
159 kB URL res-1.cdn.office.net/officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (764)
Size 159 kB (158561 bytes)
Hash 4bf3d150d53b4dd127cfe43980536f6d
428e716f63d3c7df09a45dce0f480546f036db15
0713d7aa72bb0bd4aa96098f94fd4b78fe0d1a1ebc1c21d55998f58cf073a87d
GET /officeonline/pods/s/h0713D7AA72BB0BD4_PptScripts/ppteditDS.core1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 158561
last-modified: Thu, 11 Apr 2024 04:44:26 GMT
x-ms-request-id: 548daf38-001e-0033-472f-8fa03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370674992,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180d30&TotalRTCDNTime=2&CompressionType=br&FileSize=158561"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h09A1411BF361D3D6_PptScripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h09A1411BF361D3D6_PptScripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 2944, version 4.30147
Hash 569a610df4fd269faa528a2197dfaa9a
cfc7596b939a341c5ddffc53cfd607745af18e8f
09a1411bf361d3d649f4ff5098e0197510232477bf099872f58f5d1ec483e9af
GET /officeonline/pods/s/h09A1411BF361D3D6_PptScripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2944
last-modified: Fri, 19 Apr 2024 00:38:11 GMT
x-ms-request-id: 28db6738-d01e-0030-7df6-914158000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370674995,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180d33&TotalRTCDNTime=2&CompressionType=&FileSize=2944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Mon, 22 Apr 2024 05:17:29 GMT
x-ms-request-id: c39eed83-201e-000b-6178-9404fc000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370674996,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180d34&TotalRTCDNTime=2&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js
200 OK 515 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 515 kB (514607 bytes)
Hash c658bb8674897e74b2abbc48f7833231
53caf3d93d8395d87e7134a4a409cd094b11f4c8
f9c7e923a7351d488da5e831c1e1596cdeaf7e82d16e05220403a10c5612a44b
GET /officeonline/pods/s/hF9C7E923A7351D48_PptScripts/wp5/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 514607
last-modified: Thu, 11 Apr 2024 04:58:52 GMT
x-ms-request-id: a9258965-701e-0016-3140-8d0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370674993,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180d31&TotalRTCDNTime=2&CompressionType=br&FileSize=514607"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js
85 kB URL res-1.cdn.office.net/officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 4adf481971ed3a057a5a1db09804095b
54a336b9069e7e99ad18b4e38861bf72ae095840
26dfc02c858d4d2310aaf6054c5988ff12060cc7eac3bc3c835bef55e86485fe
GET /officeonline/pods/s/h26DFC02C858D4D23_PptScripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 85261
last-modified: Thu, 11 Apr 2024 04:51:31 GMT
x-ms-request-id: 2823a0f3-301e-005a-663a-8f9970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370674994,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180d32&TotalRTCDNTime=2&CompressionType=br&FileSize=85261"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
404 Not Found 215 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Hash 411e1682432d2f124fb90dd61000c6f9
2a3fdd60bab4f49b6e7f2d6f1c45dbbb37b1c8bb
ba74ab15cde2b1c1e812c518a32b935f8b87ac6f27fb3475cc088f35fb29fb0f
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 215
x-ms-request-id: be571f44-e01e-004c-3bc4-96f830000000
date: Thu, 25 Apr 2024 04:00:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370675248,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017606.16180e30&TotalRTCDNTime=2&CompressionType=&FileSize=215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Mon, 22 Apr 2024 05:17:29 GMT
x-ms-request-id: c39eed83-201e-000b-6178-9404fc000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370677868,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017607.1618186c&TotalRTCDNTime=2&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js
200 OK 340 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (610)
Size 340 kB (340543 bytes)
Hash 9732cf77ba722fab236d1a67fa7bbc10
fc5caff2b6bcfddd6cd693ac3f5ea2a4eed28aaf
11eecb354ed22be4a054a42c2872f1a5ed30a2321c2df8cfca890f1034507b2b
GET /officeonline/pods/s/h11EECB354ED22BE4_PptScripts/ppteditDS.core2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 340543
last-modified: Thu, 11 Apr 2024 04:43:19 GMT
x-ms-request-id: fa1761b7-701e-004b-0b58-8e03c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370677867,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017607.1618186b&TotalRTCDNTime=2&CompressionType=br&FileSize=340543"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
404 Not Found 215 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Hash 411e1682432d2f124fb90dd61000c6f9
2a3fdd60bab4f49b6e7f2d6f1c45dbbb37b1c8bb
ba74ab15cde2b1c1e812c518a32b935f8b87ac6f27fb3475cc088f35fb29fb0f
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 215
x-ms-request-id: be571f44-e01e-004c-3bc4-96f830000000
date: Thu, 25 Apr 2024 04:00:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370677958,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017607.161818c6&TotalRTCDNTime=2&CompressionType=&FileSize=215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pops/CoauthHandler.ashx?Action=GetEditorsTable&WOPISrc=https%3a%2f%2fwopi.onedrive.com%2fwopi%2ffiles%2f7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075
380 B URL powerpoint.officeapps.live.com/pops/CoauthHandler.ashx?Action=GetEditorsTable&WOPISrc=https%3a%2f%2fwopi.onedrive.com%2fwopi%2ffiles%2f7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash f2a82ed03414e7bc35d635cfe37fea79
afb89059e640739ecbd66e40b76285b16b23326b
4f5a2b7ddf2edc1ff2a90dee3189014932c47beb8d281115c4e0d8835a2443f6
GET /pops/CoauthHandler.ashx?Action=GetEditorsTable&WOPISrc=https%3a%2f%2fwopi.onedrive.com%2fwopi%2ffiles%2f7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-xhr: 1
X-Requested-With: XMLHttpRequest
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-UserType: WOPI
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 380
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 382f012c-197d-46dc-98a0-290437fa0fd7
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 4941557E11F7489B8B3E4288C91FD571 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:06Z
date: Thu, 25 Apr 2024 04:00:07 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 7cb93eee-b00a-40b4-967c-0fb9ce6c04e1
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:07 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 04:00:07 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":1,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e7646168-01d5-4510-9f27-a3e3a5420f22
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 7ff00429-6e3c-45ec-bad8-6c1c4f46ac1c
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:07 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 04:00:07 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 3f55c1fc6e333f4fd81e7aa4de965f92
ff5e675ce1aba48e6fcfba6e3111e9c8a3cbeb13
c0eb625b632966755a9b533fdb3dd43991689b3c36eb1aec43e14f3d220f9044
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714017605271
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 6159
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=4daa708d54ae4ee998e336ceba968817&HASH=4daa&LV=202404&V=4&LU=1714017607785; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 04:00:07 GMT; Path=/;Secure; SameSite=None
MS0=35380ccd684c464290fcd920197d90e9; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 04:30:07 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 2514
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:07 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 619c96335cd1d23c379bf9937224df9a
3ce4a7bdb7ed5773445692afa6622d98c572b3e1
20a550c9fbdd0bba051dce3c1e5b6480e2a5622330c9e62c773754b564230d66
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714017605273
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1881
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 04:00:07 GMT; Path=/;Secure; SameSite=None
MS0=d7daa0e3847143a583a4991f87e14017; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 04:30:07 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 2591
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:07 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hC470C85A46021442_PptScripts/wp5/appChromeLazy.min.js
159 kB URL res-1.cdn.office.net/officeonline/pods/s/hC470C85A46021442_PptScripts/wp5/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 159 kB (159030 bytes)
Hash a441ce0f82d5cc287e65290adba66350
6234fc6b4be667da2c1f4e842560803aa9616a71
c470c85a4602144254b3200e5bb0e42c011099c3660704deae7fd56ae1e6ea5a
GET /officeonline/pods/s/hC470C85A46021442_PptScripts/wp5/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 159030
last-modified: Thu, 11 Apr 2024 04:55:15 GMT
x-ms-request-id: 06b0b47e-e01e-003b-4d26-8fba33000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370680803,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.161823e3&TotalRTCDNTime=2&CompressionType=br&FileSize=159030"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js
200 OK 25 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash da5ce5235e8fa8dc10b0d43f65db6c36
216be83114c625d870e4cae5f992e733dfd227be
dd0b5742bfcc869613c22bab0007f5202384a7c85bfad4731e8972bd62be1cba
GET /officeonline/pods/s/hDD0B5742BFCC8696_PptScripts/wp5/statusBar.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24789
last-modified: Thu, 11 Apr 2024 04:57:20 GMT
x-ms-request-id: 00785b62-501e-005c-43fb-8faacf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370680908,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.1618244c&TotalRTCDNTime=2&CompressionType=br&FileSize=24789"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:16 GMT
x-ms-request-id: 20a081b5-201e-0024-651e-d00937000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370680980,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.16182494&TotalRTCDNTime=2&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
32 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370680993,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.161824a1&TotalRTCDNTime=2&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 149a54e9-65b0-4a96-ae53-f2fb1523aed9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:08 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":77,"Value":"https://res-1.cdn.office.net:443/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css","Type":"ResourceDownloadSuccess"},{"Index":2,"MsSinceStart":116,"Value":"Start Wireframe Boot","Type":"MinimalBoot"},{"Index":3,"MsSinceStart":1709,"Value":"FetchFirstImagesEnd:1714017606751 FetchFirstImagesStart:1714017605048 MinimalBootImageReqTime:1703 RetryCount:0 Status: 200","Type":"MinimalBoot"},{"Index":4,"MsSinceStart":1710,"Value":"firstSld fetched:sld0/fss","Type":"MinimalBoot"},{"Index":5,"MsSinceStart":1710,"Value":"firstTh fetched","Type":"MinimalBoot"},{"Index":6,"MsSinceStart":1711,"Value":"sldCount fetched","Type":"MinimalBoot"},{"Index":7,"MsSinceStart":3325,"Value":1714017608367,"Type":"AppInitStatus_ribbonSkeletonDismissed"},{"Index":8,"MsSinceStart":3326,"Value":1714017608368,"Type":"Stage1Ribbon"},{"Index":9,"MsSinceStart":3406,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 8b28394a-717c-4f5c-ade7-1020553610e0
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 53695f5e-b415-43ae-aeff-3114f99f7d50
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:08 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf
404 Not Found 215 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Hash 9895267e2619c2528addbab546479f5a
8f380018ce17344f4c0783a856d8a8c1a34f1866
b46c4babd4f8f6c6543df5b5b9eb21522c1ac16fa647a7c33d5f068c31c2fce6
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 215
x-ms-request-id: bf417f13-201e-0053-3cc5-964b34000000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370681567,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.161826df&TotalRTCDNTime=2&CompressionType=&FileSize=215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/x-font-ttf
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js
444 kB URL res-1.cdn.office.net/officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (669)
Size 444 kB (444329 bytes)
Hash 8a982260baee7f70d37785bc740b9e7b
e8a81549380b1220a5b66bf046758700c7228125
21e8176126d407f29f242257faab84306553eaf68a8a7dacd86f845e6e07cd31
GET /officeonline/pods/s/h21E8176126D407F2_PptScripts/ppteditDS.core3.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 444329
last-modified: Thu, 11 Apr 2024 04:43:18 GMT
x-ms-request-id: 541b6b5d-a01e-0067-7258-8eef6b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370682393,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017608.16182a19&TotalRTCDNTime=2&CompressionType=br&FileSize=444329"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: d9ca5124-27c6-400c-8dd5-1f80e6c13d8b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:09 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":9,"MsSinceStart":4486,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":10,"MsSinceStart":4486,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: cc0c0df3-8f87-494c-bb6b-3941524b3007
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 0ad1bb1f-d850-439d-a822-ffd0f1dae8a5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:09 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js
935 kB URL res-1.cdn.office.net/officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1775)
Size 935 kB (935105 bytes)
Hash 66fc518142869a987fb20d018877a714
ee7c3225c67d227a8cabeea7d2dd746c8024a17e
d47ae170d8d5d27090e7cf07a12ce0d72a1db060cac0128594ddf4658eae5260
GET /officeonline/pods/s/hD47AE170D8D5D270_PptScripts/ppteditDS.ext-slim.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 935105
last-modified: Thu, 11 Apr 2024 04:45:16 GMT
x-ms-request-id: 3351c2ba-901e-006c-5658-8e1400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370684729,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017609.16183339&TotalRTCDNTime=2&CompressionType=br&FileSize=935105"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&caller=Slideshow&pptoPresentFrontDoorEnabled=false&postedit=false
200 OK 251 B URL GET HTTP/2 powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&caller=Slideshow&pptoPresentFrontDoorEnabled=false&postedit=false
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d4fc2b46befe723898924f56d8c37637
794776b0f9a99da98153ee84d2081f4336d6bf8e
48f21744dd090940a3916a76e82486528d63801cf0761ec6a2780d5c221b12b0
GET /pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&caller=Slideshow&pptoPresentFrontDoorEnabled=false&postedit=false HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: f340d052-bfb6-441c-81eb-992e68387a58
Content-Type: application/json; charset=utf-8
WaitForSessionTimeoutMs: 0
X-xhr: 1
X-WacCluster: PNL1
X-UserType: WOPI
X-OfficeVersion: 16.0.17607.40507
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 251
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f340d052-bfb6-441c-81eb-992e68387a58
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f39e41d8-05ab-4df0-85ac-b282cd076e42
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
lastpodeditcompleteutc: 01/01/001 00:00:00.000
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 7C853988A09241F78B3253249A77E4BB Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:09Z
date: Thu, 25 Apr 2024 04:00:09 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css
200 OK 2.3 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (2915), with CRLF line terminators
Hash 05a4bfcc7172f3aa5b7e128d848b2ed4
8d82e6c894314b4be33c038ca1e3e993dccec019
60d78c78e38fec8aa80243e18053e53a92216e953b2e3d4ab1fb97f865e16149
GET /officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2268
content-type: text/css
last-modified: Mon, 22 Apr 2024 17:50:57 GMT
x-ms-request-id: 959ec796-301e-005a-2ce0-949970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370684969,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017609.16183429&TotalRTCDNTime=3&CompressionType=br&FileSize=2268"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/ink.js
200 OK 25 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/ink.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 893d7f4bfd86afcb1ed47af2120d8222
35fc4bcf2fb5eee22828fe0c88724c3da7587483
a618fb8f5d245b8bd53e6eb7bfe9cf43561852eed914111edaa78cdfc008506a
GET /officeonline/pods/s/161760740507_PptScripts/ink.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25041
last-modified: Sun, 07 Apr 2024 22:19:13 GMT
x-ms-request-id: 2501cd67-301e-0028-1e32-8a9e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370685096,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017609.161834a8&TotalRTCDNTime=2&CompressionType=br&FileSize=25041"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js
50 kB URL res-1.cdn.office.net/officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (627)
Hash ac779c170faa7ce539eef08410fdd2d0
365a453f2794179fa53fbc08f4c40c18357251d9
80ad5a9f18e1622d6fae9e4fd0ed342b3b63a7d0c6e585d1ef81d9cfcf81c9b7
GET /officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 50402
last-modified: Thu, 11 Apr 2024 04:44:30 GMT
x-ms-request-id: aba9bb61-f01e-0018-6e15-8f20f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370685131,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017609.161834cb&TotalRTCDNTime=2&CompressionType=br&FileSize=50402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/p/HostDocumentSettings.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&wdo=2&dchat=1
200 OK 21 kB URL POST HTTP/2 powerpoint.officeapps.live.com/p/HostDocumentSettings.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&wdo=2&dchat=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b63bd2ab7d44910380d6dac902dd2b82
9b7c55f0f3de5a421146cf95f1c22c3b29289db0
e830c00e8ac2bd749bc23b632a3654c4585d1a1b5d8c8023ab27233019263596
POST /p/HostDocumentSettings.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&wdo=2&dchat=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-SessionContext: host%3D%26qt%3DDefault
X-CorrelationId: 42a2c962-8699-47db-8de8-e9f6ad84fa0d
X-UserType: WOPI
haep: 1
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 2099
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 21042
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 42a2c962-8699-47db-8de8-e9f6ad84fa0d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67D
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-newkey: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
x-officefd: AM4PEPF0002D67D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 61A8FB5E211A4B3DB5AF7CBB29067BBC Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:09Z
date: Thu, 25 Apr 2024 04:00:09 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js
200 OK 102 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (101466 bytes)
Hash d02ffe0f86ffe7997c4af23e821f151a
6d26a7652fdbbe1a480159d10c5a62fa33a9958b
08087c8e672c967b93be8d05f08c4c14eef8bbf9ddc35d6e8f3d8580e7bb8e5d
GET /officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 101466
last-modified: Thu, 11 Apr 2024 04:49:29 GMT
x-ms-request-id: b34b9b9e-701e-004b-4323-8f03c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370687420,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017610.16183dbc&TotalRTCDNTime=2&CompressionType=br&FileSize=101466"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js
200 OK 9.8 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (42379)
Hash 159117e3168226c70af093c137f756f4
30ff4a7fdc81a16c82c987aba82aa2ddac886044
8f36e575dc60ec7273e8e80f8705edc944fc9036accb238e9dcd09bd27110abf
GET /officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9842
last-modified: Thu, 11 Apr 2024 04:55:42 GMT
x-ms-request-id: a77fa5d9-701e-0016-6de3-8f0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370687421,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017610.16183dbd&TotalRTCDNTime=2&CompressionType=br&FileSize=9842"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4499
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fc9f8eb3-a7b6-46fa-aec0-54e1610cf086
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f4fc1369-b06f-46da-84bc-250d8fc78ac3
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 8C45524076A74F7BBFBD4FEB98DDB408 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4c64786f-128c-4eca-98d5-2633616c4b1d
4.2 kB URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4c64786f-128c-4eca-98d5-2633616c4b1d
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 5b3e5bede23bd1f22197fd301dfeb436
db6353430f63f40ca5b2157a9ecee9f436e8364a
128fa754b2e58598f9140e4d35dc420699d869cf269636d9f00d9700c7999b6e
POST /pods/PowerPoint.ashx?action=4c64786f-128c-4eca-98d5-2633616c4b1d HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: c12481cb-6df7-4dd0-ab66-74a883597916
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 4248
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c12481cb-6df7-4dd0-ab66-74a883597916
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 999acc4c-9ead-42a8-9439-2f315985a67f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: FB16139FD01540F6966D1F4AAA94BC6A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: d568d286-c962-4c53-a236-6d6c1e2f2480
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
200 OK 43 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash dcd75c53af59388aed1d1dbe3ed72ae4
e845df9fe00d9b0b44d9c42f27475487482bd558
389d714ea09b37bb06c54fc060e6bcfbf84bbb2462dcdd485d9e69055a59eb49
POST /pods/podedit.svc/jsonAnonymous/GetThumbs HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: a964b184-07a5-4d47-8be0-65a7a978e2f9
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
Content-Length: 556
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 43296
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a964b184-07a5-4d47-8be0-65a7a978e2f9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: e8ccd3d6-f09e-43e2-845e-64d053995e08
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2A760D6147B0443082CB9372F809325E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":10,"MsSinceStart":4582,"Value":{"FrameFetchStart":1714017603611,"AppInitStart":1714017609517},"Type":"MetricsBeacon"},{"Index":11,"MsSinceStart":4975,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":12,"MsSinceStart":4975,"Value":{"DocumentLoadedTime":1714017610018,"ContentViewable":1714017606759},"Type":"MetricsBeacon"},{"Index":13,"MsSinceStart":4982,"Value":{"AppInitDuration":507},"Type":"MetricsBeacon"},{"Index":14,"MsSinceStart":5008,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 4dc84e1f-fe69-43f8-b415-e3ea3621ebe4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 56a228c1-4f86-43b9-90a8-bdcad64b198c
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 122
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3f3c8727-f83e-4889-8336-9bc658c5978d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 90c3d867-921b-4c8d-9fea-e8e60b2ee32e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com, https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 71D0FCE4959E48E4AA84FD2D9C57F08C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2372
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 11edff5b-a1db-44a2-a7d3-156a11d36f0f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 08c30f08-a079-4ed3-a5b4-8c16bc00fd0a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 413EBD6AAEE14E1DA5BD7576C82E3942 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js
111 kB URL res-1.cdn.office.net/officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (110652 bytes)
Hash d6ac2bf65fe4d9466094063ed1408ec5
bab1a4b864e9c9e40c58fcaefaf3d2ad643f7b8f
ba8ef95970eb59831174d6d61d69cc04d7a9ad062281a7e5f7554ba28145d6ce
GET /officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 110652
last-modified: Thu, 11 Apr 2024 04:55:04 GMT
x-ms-request-id: f17cc2bf-001e-001c-262c-8fadf7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370688786,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.16184312&TotalRTCDNTime=2&CompressionType=br&FileSize=110652"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: ab5c3c3e-b958-4b4d-9dcc-f7d1e42571fd
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPPTThumbnailDiscovery&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
0 B URL powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPPTThumbnailDiscovery&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pops/RoamingServiceHandler.ashx?action=getPPTThumbnailDiscovery&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: f96886a9-f55c-484e-b9be-79a72cff6c1c
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f96886a9-f55c-484e-b9be-79a72cff6c1c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: C62B39F295974E7AB4A9460C1B15D5C6 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":14,"MsSinceStart":5675,"Value":{"DocPageNavigationStart":1714017600049,"DocPageFetchStart":1714017600871,"DocPageResponseStart":1714017602138,"DocPageResponseEnd":1714017602140,"DocPageNavigationType":0,"DocPageNavigationRedirects":0},"Type":"MetricsBeacon"},{"Index":15,"MsSinceStart":5967,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: cad500a7-b4ea-4686-8d32-fc44e8bb8343
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: afe713f6-6ec3-45d2-8d29-ec79486e4984
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
200 OK 31 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 46d3fb7a571dd0ca21e2312add0d5081
d8b4a50e09e605d472e9f93c815f9a3c9fa76e26
f983f8e2d9a58b42a15feb6586f73a61d04c8da3ca86cbefbae902ca0724367f
POST /pods/podedit.svc/jsonAnonymous/GetThumbs HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 0fcf6e72-923b-472d-989d-1173d3bf988f
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 522
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 31338
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0fcf6e72-923b-472d-989d-1173d3bf988f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 2288ccd3-e055-4c78-a310-d2475d51f6e2
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 36076B01683342B98020CED98C5A77DE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:11Z
date: Thu, 25 Apr 2024 04:00:10 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/EnsureHostSession
151 B URL powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/EnsureHostSession
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9958525ff5b22a05706a358d7f9eab95
1fec71bcc114d451b449349825f07bda1cd91b3a
1ffa163211eb140df377a5e41b1800508ee514c0d2c39f93c8343bc556968d64
POST /pops/ppt/edit.svc/jsonAnonymous/EnsureHostSession HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 8fb695fb-8bea-4b12-b9d5-2fb77d7de393
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-DocumentSessionCluster: PNL1
X-UsePopsRole: true
X-PopsAffinityRoutingEnabled: false
X-PopSessionId: nhlagui6gsryjpuva
X-WacSessionStartTime: Thu, 25 Apr 2024 04:00:03 GMT
RequestTimeout: 10000
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 794
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 151
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8fb695fb-8bea-4b12-b9d5-2fb77d7de393
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D738
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmN0FgvGDLNDToBVHmp8pZouAAAAAAAAAAAAAAAAAAAAAAAAAABvBjJgxaL5XWC63yDt6CsK0
ccpi: dBYLxgyzQ06AVR5qfKWaLilodHRwOi8vYW00cGVwZjAwMDJkNzJiL3BvcHNiZS9lZGl0aW5nLnN2Yw2
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D738
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: FD799A100DD94C19AD8CDE12B3C971CD Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:10Z
date: Thu, 25 Apr 2024 04:00:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h314018CC0869CD81_PptScripts/1033/powerpoint-ribbon-intl-lazy.min.js
130 kB URL res-1.cdn.office.net/officeonline/pods/s/h314018CC0869CD81_PptScripts/1033/powerpoint-ribbon-intl-lazy.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 130 kB (130180 bytes)
Hash 6e27991a243a6ff255fa634b363122ba
8eb2d1f76644f7c6a28724f7b2cc12b2169f0138
314018cc0869cd8168eae7cbc5fd954db7ced233f6d045e254988fded5e19785
GET /officeonline/pods/s/h314018CC0869CD81_PptScripts/1033/powerpoint-ribbon-intl-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 130180
last-modified: Sun, 21 Apr 2024 06:02:19 GMT
x-ms-request-id: 421edaf4-e01e-0014-418c-96b7f8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689243,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161844db&TotalRTCDNTime=2&CompressionType=br&FileSize=130180"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings
0 B URL powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: f575646c-2b47-4bdf-aaa0-4c9a3f3989ea
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f575646c-2b47-4bdf-aaa0-4c9a3f3989ea
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 1EB70594E4C948D2B17CD72D6DD03DFB Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:11Z
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PptScripts/Acl/Acl1033.js
6.0 kB URL powerpoint.officeapps.live.com/pods/PptScripts/Acl/Acl1033.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Hash d9604cc18f364a6ade707b7faaec642c
f38f0b94764184d4373886fda1ca87d352bfce5a
f282423f48f12f56419363384f3b10002c8d3d106bc1ac8ff721602aa2b2fd9b
GET /pods/PptScripts/Acl/Acl1033.js HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5979
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 04 Apr 2024 23:11:14 GMT
accept-ranges: bytes
etag: "0d5bf63e586da1:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8506667d-2700-4af7-84cd-2bd55499a86d
x-usersessionid: 8506667d-2700-4af7-84cd-2bd55499a86d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ef2b9cd5-4c40-4d20-a830-7d73c26d204a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: C749B2E5E79045FD9AD032431A117CD0 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:11Z
date: Thu, 25 Apr 2024 04:00:11 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js
138 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (64817)
Size 138 kB (137585 bytes)
Hash 1eb1a1db2b2c0356a2e7cee6f9c0a153
47386c986708eef6bc7b928eaff19cc44f917ba9
8d823abe65fe6f1af70da9209d536039d8145376bb029934e22e9c28bb6d16cb
GET /officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 137585
last-modified: Sun, 07 Apr 2024 22:18:09 GMT
x-ms-request-id: 58ed6b1d-d01e-0030-6722-8a4158000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689385,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.16184569&TotalRTCDNTime=2&CompressionType=br&FileSize=137585"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h17B0C662D8D61589_PptScripts/1033/powerpoint-editor-intl.min.js
5.9 kB URL res-1.cdn.office.net/officeonline/pods/s/h17B0C662D8D61589_PptScripts/1033/powerpoint-editor-intl.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (15630)
Hash 0ede7c5083dd10ca8b2df50c55854f2a
d72229ec70760e994dfa5bade8eb8448011020bf
17b0c662d8d615892c3e8de73b14d8ccd492e15d95308f9eb75b88da420726ea
GET /officeonline/pods/s/h17B0C662D8D61589_PptScripts/1033/powerpoint-editor-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5862
last-modified: Thu, 18 Apr 2024 16:07:01 GMT
x-ms-request-id: 59c6596d-b01e-0044-1909-9475a8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689393,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.16184571&TotalRTCDNTime=2&CompressionType=br&FileSize=5862"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=LanguageInfo
1.3 kB URL powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=LanguageInfo
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 1dd666d5292c4793197fa3c08f7fcd81
f1177e17ff21b36ae512b9172fed6abb084be295
33113f1a2159ddff4a9e0ab32b7ee8108dca143e3a8bc444842d2f3872bbde8b
POST /p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=LanguageInfo HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: e6286411-d1c6-441b-93b4-6e0459ef1924
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
Content-Length: 29
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1282
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e6286411-d1c6-441b-93b4-6e0459ef1924
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67D
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D67D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0BE618FE0C4442BEB63DCA5EE51437E9 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:11Z
date: Thu, 25 Apr 2024 04:00:11 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h24F8194CAE70307A_PptScripts/1033/audio-settings-strings.min.js
200 OK 295 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h24F8194CAE70307A_PptScripts/1033/audio-settings-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (891), with no line terminators
Hash 2efee77e4aaa7b1bd85730275a30b9db
a25a5fbf68e07473de613bf73ede5a041294f476
24f8194cae70307aea4c04fc40fdc28a22a91650fb828fd5c7c224fff778ef81
GET /officeonline/pods/s/h24F8194CAE70307A_PptScripts/1033/audio-settings-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 295
last-modified: Sun, 21 Apr 2024 17:20:07 GMT
x-ms-request-id: 66c0aa04-b01e-0019-0d19-947f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689770,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846ea&TotalRTCDNTime=2&CompressionType=br&FileSize=295"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h2C0F2698C8D5A3FA_resources/en-US/clientManifest.exp.js
21 kB URL res-1.cdn.office.net/officeonline/pods/s/h2C0F2698C8D5A3FA_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (61380), with no line terminators
Hash 2a14ddd94137e1cd281a29e3df940d55
85748f09b6978741fddf4de15a0d226450e32aaa
2c0f2698c8d5a3fa6268113f392dc21778a09263243b3652779339caece39597
GET /officeonline/pods/s/h2C0F2698C8D5A3FA_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 21418
last-modified: Sun, 07 Apr 2024 22:24:06 GMT
x-ms-request-id: ecc1bcdd-a01e-0048-3065-89e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689771,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846eb&TotalRTCDNTime=2&CompressionType=br&FileSize=21418"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h5A365DB84EE89733_PptScripts/video.js
25 kB URL res-1.cdn.office.net/officeonline/pods/s/h5A365DB84EE89733_PptScripts/video.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (60911)
Hash 6f3be4d6df3d1e27e69d3e305102da66
afb0cdb0cd41bb1c124f611685e3e5af2702011f
5a365db84ee8973317b8a57b3e18d61c1dc68f4ae314f2f7765c128db265f2a4
GET /officeonline/pods/s/h5A365DB84EE89733_PptScripts/video.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25354
last-modified: Sat, 20 Apr 2024 00:19:40 GMT
x-ms-request-id: a73ffa79-201e-000b-2ac4-9204fc000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689772,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846ec&TotalRTCDNTime=2&CompressionType=br&FileSize=25354"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h00766DDB609CB573_PptScripts/svgshape.min.js
200 OK 34 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h00766DDB609CB573_PptScripts/svgshape.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 115a28843e876db00c58750d77ad143e
0d71db2467f87649e4110c40c86dfc95b376b959
00766ddb609cb573c6270cec9f97d69328edd2645e5b0f8c1bd255b914f9a716
GET /officeonline/pods/s/h00766DDB609CB573_PptScripts/svgshape.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33809
last-modified: Sun, 21 Apr 2024 00:35:35 GMT
x-ms-request-id: bd010105-a01e-0048-6089-93e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689773,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846ed&TotalRTCDNTime=2&CompressionType=br&FileSize=33809"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 68112e80-d5ad-49ca-b486-a9e7d8987aa6
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 02b3628e-f23e-4840-a8e8-9081ce9fa1ba
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/Gc2HostPpt.js
180 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/Gc2HostPpt.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65468)
Size 180 kB (180353 bytes)
Hash 44c458b47efb628a54970be46d85841a
ac93ccce5ea4f7e60b462448132f74d31560068d
5fe57cbb7ea5d7f2bcc0f9fdc57dbef16798975ac4fbe9e9b7bdaa3eeeec44e2
GET /officeonline/pods/s/161760740507_PptScripts/Gc2HostPpt.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 180353
last-modified: Sun, 07 Apr 2024 22:20:05 GMT
x-ms-request-id: 8ffad0fb-c01e-005e-6732-8a1477000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689775,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846ef&TotalRTCDNTime=2&CompressionType=br&FileSize=180353"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 773e8497-a9c2-44bd-b707-06971dd0377f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js
50 kB URL res-1.cdn.office.net/officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (627)
Hash ac779c170faa7ce539eef08410fdd2d0
365a453f2794179fa53fbc08f4c40c18357251d9
80ad5a9f18e1622d6fae9e4fd0ed342b3b63a7d0c6e585d1ef81d9cfcf81c9b7
GET /officeonline/pods/s/h80AD5A9F18E1622D_PptScripts/ppteditDS.comment.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 50402
last-modified: Thu, 11 Apr 2024 04:44:30 GMT
x-ms-request-id: aba9bb61-f01e-0018-6e15-8f20f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689776,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846f0&TotalRTCDNTime=2&CompressionType=br&FileSize=50402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 238ce908-9194-47a2-af3f-7a0c774040da
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 9fe40c1f-7ef0-4539-a987-55182f6d3a4a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js
200 OK 259 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 259 kB (258602 bytes)
Hash bdf49dee21cac1ebd925691904e169e4
fe6c4498e778d7020c83cce8cfaf135228467fb6
07f61086b59e4dcbd3779f06ed9a501b1bcdea4cfce9bf6fb4bdf56fa8efabd5
GET /officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 258602
last-modified: Thu, 11 Apr 2024 04:50:49 GMT
x-ms-request-id: 94934b97-101e-005d-2327-8ff513000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689777,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846f1&TotalRTCDNTime=2&CompressionType=br&FileSize=258602"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js
200 OK 103 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (897)
Size 103 kB (103408 bytes)
Hash 44c2cd50afcad7506d393a3e383a3989
1cfd810277f81567af2eeb54ccbd8273c44a4c8b
758e56824772d256786e73bc77e6c5eeedc6928abf2e43580008ee7c72932495
GET /officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 103408
last-modified: Thu, 11 Apr 2024 04:43:56 GMT
x-ms-request-id: 76543298-901e-000e-6c2f-8fd627000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370689778,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017611.161846f2&TotalRTCDNTime=2&CompressionType=br&FileSize=103408"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: f863bf19-6af1-4eb1-ac7e-b287086e4a66
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 54551
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: f863bf19-6af1-4eb1-ac7e-b287086e4a66
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: fabbd2af-e7d2-4516-ae13-457cf87dfd4d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: d9e27a2c-26c6-4eb9-ae93-ab798632aac5
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53358
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: d9e27a2c-26c6-4eb9-ae93-ab798632aac5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 6de85503-00a6-412e-9358-46ac58fec964
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: b8bf3bb2-4ba3-4b5b-8f26-3edfce06067e
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53807
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b8bf3bb2-4ba3-4b5b-8f26-3edfce06067e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 1e364309-886b-441c-b27a-806859bb49dc
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":15,"MsSinceStart":6255,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":16,"MsSinceStart":6259,"Value":{"ContentEditable":1714017611298},"Type":"MetricsBeacon"},{"Index":17,"MsSinceStart":6315,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 7e5b913a-4bc6-4ece-8ff8-621eaaafaebb
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: f5218234-cec4-4b57-911c-dbbb4df77791
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: d04f4b31-fbaf-44f6-a3e1-621cffe701d1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 36922
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: d04f4b31-fbaf-44f6-a3e1-621cffe701d1
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: f0eed334-f73c-479a-ba9e-55d9ba74393d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:11 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hEB7ADB98E1B16FB2_PptScripts/1033/ppt-ribbon-sprite-ext.min.js
368 kB URL res-1.cdn.office.net/officeonline/pods/s/hEB7ADB98E1B16FB2_PptScripts/1033/ppt-ribbon-sprite-ext.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 368 kB (367706 bytes)
Hash 979b38451e1d8b9fd66e35462bc1d106
4f5bd1d1b4466da0579626e4b131f4f54d9a6e6c
eb7adb98e1b16fb2340aaa283797017c6a78f188fc6c58b43b7fafc2def836b7
GET /officeonline/pods/s/hEB7ADB98E1B16FB2_PptScripts/1033/ppt-ribbon-sprite-ext.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 367706
last-modified: Sun, 21 Apr 2024 06:09:56 GMT
x-ms-request-id: dc3db072-b01e-0044-2a7d-9675a8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692050,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.16184fd2&TotalRTCDNTime=2&CompressionType=br&FileSize=367706"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/selectionPaneManager.min.js
9.1 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/selectionPaneManager.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (36901)
Hash d40ae2b3dd2bc552ddb4c9243ffc8065
4c584c1da617a4877be72416f406eb0e5258eae2
24dfcb31cebdbf6aa74516a13329bf89904b6a12fecea148b482af9c55da756f
GET /officeonline/pods/s/161760740507_PptScripts/wp5/selectionPaneManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9145
last-modified: Sun, 07 Apr 2024 22:27:42 GMT
x-ms-request-id: 8ab70165-f01e-0018-5f35-8a20f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692189,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.1618505d&TotalRTCDNTime=2&CompressionType=br&FileSize=9145"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js
200 OK 259 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 259 kB (258602 bytes)
Hash bdf49dee21cac1ebd925691904e169e4
fe6c4498e778d7020c83cce8cfaf135228467fb6
07f61086b59e4dcbd3779f06ed9a501b1bcdea4cfce9bf6fb4bdf56fa8efabd5
GET /officeonline/pods/s/h07F61086B59E4DCB_PptScripts/wp5/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 258602
last-modified: Thu, 11 Apr 2024 04:50:49 GMT
x-ms-request-id: 94934b97-101e-005d-2327-8ff513000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692188,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.1618505c&TotalRTCDNTime=2&CompressionType=br&FileSize=258602"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/headerFooterManager.min.js
5.2 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/headerFooterManager.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (18053)
Hash 6ac264225437f1e6e9049cc8729807e0
1f6365a5db3c7ad9a429fc911ecefc3f3e38a4a0
c15f466a88099e7d7a77070a02245918db49149498142fc493056b201a4b3566
GET /officeonline/pods/s/161760740507_PptScripts/wp5/headerFooterManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5235
last-modified: Sun, 07 Apr 2024 22:28:41 GMT
x-ms-request-id: 2b6d0e67-c01e-004e-1b35-8ad11f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692190,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.1618505e&TotalRTCDNTime=2&CompressionType=br&FileSize=5235"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/colorPickerManager.min.js
4.4 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/wp5/colorPickerManager.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (13462)
Hash 898bfdd6b851fcace0ad1b2d3d08b782
79165e8d5235132aa01022053894c9b7a7978461
1ca27c5c66c7803e235c84ac9742d7046e101a52f9082492d7d1cedfcb647369
GET /officeonline/pods/s/161760740507_PptScripts/wp5/colorPickerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4351
last-modified: Sun, 07 Apr 2024 22:28:28 GMT
x-ms-request-id: 2b6d0e68-c01e-004e-1c35-8ad11f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692191,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.1618505f&TotalRTCDNTime=2&CompressionType=br&FileSize=4351"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
8.2 kB URL res-1.cdn.office.net/officeonline/pods/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (35371)
Hash be73523c970f0bfa1c8f0a8c51f80bfc
b3bc3fd464e0a5766f27f84ca8d0c30993a26275
494ae42932343d70f747f5937271e4bc7b020d53a1a2973876b15af26db7b1dc
GET /officeonline/pods/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8188
last-modified: Sun, 21 Apr 2024 17:15:26 GMT
x-ms-request-id: 1e701c72-101e-0000-2615-94ff97000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692199,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.16185067&TotalRTCDNTime=3&CompressionType=br&FileSize=8188"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js
200 OK 156 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Size 156 kB (156139 bytes)
Hash 6b34abb079232321fd1edc8e190fa95d
1f374b19fad3a90877226a50658e0da2e477020f
fc7d33d67b8de44a385fd49d712d042c3c73c512e335f7317bb3d74aa44327b7
GET /officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 156139
last-modified: Thu, 11 Apr 2024 04:58:41 GMT
x-ms-request-id: 0d94dfd5-b01e-0054-1227-8fb0c0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692900,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.16185324&TotalRTCDNTime=2&CompressionType=br&FileSize=156139"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js
13 kB URL res-1.cdn.office.net/officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (700)
Hash 78d17306c062c4107ac0f0b87e508b9d
1a8f7d1ee9be35f90b21d48c08c13c8ec5f1f758
d80cb4198e3d7ea51e8be386f495bf1cd8f5a2c01c6dd1421eef20543a3501d7
GET /officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13054
last-modified: Thu, 11 Apr 2024 04:44:37 GMT
x-ms-request-id: fb573367-901e-001e-5815-8f134f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692904,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.16185328&TotalRTCDNTime=2&CompressionType=br&FileSize=13054"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js
46 kB URL res-1.cdn.office.net/officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (681)
Hash 8e9627eeca3be1baad710a62be437c00
bbcc4fb39a0c3594c5aa73eef820e26efcfee27e
f69754f67bfdc5141cf098bedbca70adafb1b3c9d4a6e9f6fbbbac4c4184ecb2
GET /officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 45725
last-modified: Thu, 11 Apr 2024 04:44:35 GMT
x-ms-request-id: a0d8f418-401e-0040-5325-8ff8af000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370692905,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017612.16185329&TotalRTCDNTime=2&CompressionType=br&FileSize=45725"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 701
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e5d9ade3-59aa-4196-8bf0-2fb265bf8878
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: BN3PEPF000037DE
x-officeversion: 16.0.17615.40511
x-officecluster: PGTUS3
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 21211bf9-9868-4de7-ae14-107d405db127
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTUS3&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000037DE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: ACA34580C7934AAC9D2DFC269A09E4F8 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:12Z
date: Thu, 25 Apr 2024 04:00:12 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hC6464970AA1ED926_PptScripts/jquery.signalr.merge.1.1.min.js
40 kB URL res-1.cdn.office.net/officeonline/pods/s/hC6464970AA1ED926_PptScripts/jquery.signalr.merge.1.1.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65398), with CRLF line terminators
Hash f3519eea6891b36c1089691f07778754
b649e2ba6415d62bb0b82e5e3955ed29d3638c56
c6464970aa1ed9260602a483adb4915e434f35808d86a7fc6a7543f7d6c9e682
GET /officeonline/pods/s/hC6464970AA1ED926_PptScripts/jquery.signalr.merge.1.1.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 40400
last-modified: Sun, 21 Apr 2024 17:15:29 GMT
x-ms-request-id: e025ab33-001e-0033-3b18-94a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370694692,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185a24&TotalRTCDNTime=2&CompressionType=br&FileSize=40400"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js
6.1 kB URL res-1.cdn.office.net/officeonline/pods/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (41569), with no line terminators
Hash 345bff8d2e34511694d9d12a008f5f5d
b3f35302052c26c285c43b935bce972904e62e28
dd4039f8afac6fd76b462c4fd4f90374b18db762719108491ac2e365196d71ac
GET /officeonline/pods/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6113
last-modified: Sun, 21 Apr 2024 17:15:26 GMT
x-ms-request-id: adb9e193-f01e-0055-1f1a-94ef1c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370694701,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185a2d&TotalRTCDNTime=2&CompressionType=br&FileSize=6113"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4479ac94-5410-4c6c-861c-111504a48fd4
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4479ac94-5410-4c6c-861c-111504a48fd4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=4479ac94-5410-4c6c-861c-111504a48fd4 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 2e1a0f39-78e7-4ede-b6f9-01c767ee7375
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2e1a0f39-78e7-4ede-b6f9-01c767ee7375
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 7c73cf06-f191-46ff-91e0-5870a5df883b
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 77ABFC1148714E139D982B1ADF3D52AA Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:12 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
200 OK 20 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetThumbs
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 6a9be73febdb0b48cd83755577e94d01
a92adb87a15ad4ab39b4efb8c2ab4f4d88173d9c
8a437079c714b526e8b53b7b70b56f0e6529e7462315b82a8082edafe711b3e9
POST /pods/podedit.svc/jsonAnonymous/GetThumbs HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 95f8bdf5-6f15-408e-b342-f0b17e24e82c
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 522
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 19873
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 95f8bdf5-6f15-408e-b342-f0b17e24e82c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 4a076b2b-b01c-4373-952c-bd633c34c3d0
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 57E7CBBB078C46549D06226863F00D94 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js
146 kB URL res-1.cdn.office.net/officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (617)
Size 146 kB (145954 bytes)
Hash 93cd2a4f308eabb46c9a63126b6671d0
1a4a9b4a68a350ebe30d730077f279450cf020e5
18caa484f7e8547fe778c52a09775abef7f0645251493711463ef9a6006566d5
GET /officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 145954
last-modified: Thu, 11 Apr 2024 04:44:53 GMT
x-ms-request-id: 54521a9c-b01e-0044-6815-8f75a8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370694941,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185b1d&TotalRTCDNTime=2&CompressionType=br&FileSize=145954"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js
825 B URL res-1.cdn.office.net/officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1875)
Hash 8251b806229b7f47e708af88ab59a0f9
290bd10d11c203db80503b250b888902f83e9c5f
66a46a92ff62d7a42a87644d93cb2071340c9eae2169ae1f3f5f6f954949b286
GET /officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 825
last-modified: Thu, 11 Apr 2024 04:51:49 GMT
x-ms-request-id: 66a4cf16-401e-0050-397b-8e3dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370694986,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185b4a&TotalRTCDNTime=2&CompressionType=br&FileSize=825"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js
200 OK 105 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (605)
Size 105 kB (105337 bytes)
Hash b1a472523410fe05a023f31a8ce637d4
68ac512f29ed52330164bb6510ef39f172bd691e
8d690de7bfcdaed8acc98b3e9cb01422cf98c29aaf6760258b3b647119cab1ab
GET /officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 105337
last-modified: Thu, 11 Apr 2024 04:44:41 GMT
x-ms-request-id: c1d3d4fb-d01e-0042-6615-8f4617000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370694998,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185b56&TotalRTCDNTime=2&CompressionType=br&FileSize=105337"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 10064
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b2a782f3-d5ba-413c-b512-c69bf0ed87aa
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: MW1PEPF00007845
x-officeversion: 16.0.17615.40511
x-officecluster: PGTUS2
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 74fb54d9-39e2-4c6c-9106-18922e2bc596
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTUS2&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: MW1PEPF00007845
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 18FB5585DED346C2AD1E0450058B0CAA Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:12Z
date: Thu, 25 Apr 2024 04:00:13 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetHostSessionInfo
149 B URL powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetHostSessionInfo
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 52d35cff8e7d0d364e5b895500654631
ecd1ca7d0dfe7e45483bbb06dbe99f57ade4477a
b71e31f8f37130eddeaaf0a208169c119089c70fca278175c9c2c0d0169e52ca
POST /pops/ppt/edit.svc/jsonAnonymous/GetHostSessionInfo HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 5609ab4f-cb23-42ca-9894-00952f268440
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-DocumentSessionCluster: PNL1
X-UsePopsRole: true
X-PopsAffinityRoutingEnabled: false
X-PopSessionId: nhlagui6gsryjpuva
X-WacSessionStartTime: Thu, 25 Apr 2024 04:00:03 GMT
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmN0FgvGDLNDToBVHmp8pZouAAAAAAAAAAAAAAAAAAAAAAAAAABvBjJgxaL5XWC63yDt6CsK0
RequestTimeout: 10000
X-PodInstance: am4pepf0002d704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 432
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 149
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5609ab4f-cb23-42ca-9894-00952f268440
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D738
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D738
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 84984853B07E47058BB7A1412A588C92 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js
200 OK 11 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (39486)
Hash 9d0222e89d75295f9ab075ef957cf1fd
a083c8b0e6838d912c4a53b3db4fe813e99958e2
fec1c75d2fa91b6d5346593f850045ccba9ee9072a86ddb95a7db91f9cbb56ce
GET /officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11165
last-modified: Sun, 21 Apr 2024 16:31:06 GMT
x-ms-request-id: bc2d51ae-901e-006c-580b-941400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370695874,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185ec2&TotalRTCDNTime=2&CompressionType=br&FileSize=11165"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js
230 kB URL res-1.cdn.office.net/officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (787)
Size 230 kB (229503 bytes)
Hash ad7fc93cea47019bc95049b990dced73
5f72ab41d6e830fe4f5c4b15541a886c35c66042
2279368212b65fabe84e56a9c67178e498c09ee9cf0081c70f81acc6ffac47b7
GET /officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 229503
last-modified: Thu, 11 Apr 2024 04:45:47 GMT
x-ms-request-id: d8a029bb-d01e-000f-1a26-8f89fb000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370695869,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185ebd&TotalRTCDNTime=2&CompressionType=br&FileSize=229503"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js
200 OK 44 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (49259), with NEL line terminators
Hash 7487f4e7aa616b911e90fdc4b3c2180e
4aabb874e9df3b41b490f780dc2af9782fb83d30
0d05dad47e626bb3870cac42badce8849b8cd56e799132caa0bc173a7f016832
GET /officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43646
last-modified: Sun, 21 Apr 2024 04:28:23 GMT
x-ms-request-id: c27f7856-801e-002d-6aa9-934ce4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370695880,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16185ec8&TotalRTCDNTime=2&CompressionType=br&FileSize=43646"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 1e7cdd24-3593-4753-a2bd-137d7cbcbda5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:12 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=6b327e18-2b5a-4217-8322-c8edb7b6a995
200 OK 129 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=6b327e18-2b5a-4217-8322-c8edb7b6a995
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=6b327e18-2b5a-4217-8322-c8edb7b6a995 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: b649767c-94e1-4c50-a2d0-4fb99d9f83ff
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b649767c-94e1-4c50-a2d0-4fb99d9f83ff
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 51c1c3be-03c3-4a02-ab03-2eb83f3e3b25
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: DC34A5CEFEF44AE5BD5257B034A801FD Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
19 kB URL wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 58710a3e1b60016505fd9c4f99bf1993
ad4e757c2a15289c6ed0b3d256be8f1cce83897d
ceefd9162f27f345af51330885265102751eb5ec65f72dcf762cb9a86a0572be
GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19048
last-modified: Tue, 23 Apr 2024 05:28:02 GMT
x-ms-request-id: da7de80b-601e-0068-0341-959907000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696673,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861e1&TotalRTCDNTime=3&CompressionType=br&FileSize=19048"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js
200 OK 103 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (897)
Size 103 kB (103408 bytes)
Hash 44c2cd50afcad7506d393a3e383a3989
1cfd810277f81567af2eeb54ccbd8273c44a4c8b
758e56824772d256786e73bc77e6c5eeedc6928abf2e43580008ee7c72932495
GET /officeonline/pods/s/h758E56824772D256_PptScripts/ppteditDS.ext-lazy.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 103408
last-modified: Thu, 11 Apr 2024 04:43:56 GMT
x-ms-request-id: 76543298-901e-000e-6c2f-8fd627000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696669,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861dd&TotalRTCDNTime=2&CompressionType=br&FileSize=103408"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:16 GMT
x-ms-request-id: 20a081b5-201e-0024-651e-d00937000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696671,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861df&TotalRTCDNTime=2&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Mon, 22 Apr 2024 05:17:29 GMT
x-ms-request-id: c39eed83-201e-000b-6178-9404fc000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696686,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861ee&TotalRTCDNTime=2&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
404 Not Found 215 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Hash a191523065220430f05638a6c70c8600
7a39bac043b14565c737ba87fb40b103f5d33dc0
4bddea7ac81f0d925b06b31e2b9df5e58c3d381d8a208d01c0a3d923b9edcae6
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 215
x-ms-request-id: 489f54b6-601e-0052-24c5-9614e8000000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696670,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861de&TotalRTCDNTime=2&CompressionType=&FileSize=215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
32 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370696690,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161861f2&TotalRTCDNTime=2&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 144 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 281d4e0aae3a293e971ade4605c3b94b
90a56ebf9f9849d7bf4051b44953675871a32685
b317af3ba5f8961c1c7b190042f7967a4289029f3341a5979281bb3bf0a79bac
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 3f3679e5-7482-4771-b244-ff0e853c3554
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 517
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 144
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3f3679e5-7482-4771-b244-ff0e853c3554
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 1be9b294-31e1-4aeb-a7d0-b928a5af3792
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: ECBC8D7772264287B54CA4C2AC3177F1 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js
3.2 kB URL res-1.cdn.office.net/officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (551)
Hash cac00c4d61d07d31d9ae4333d832725b
2a74dca5d9bd88ca7e6d83dad81610c3dd86a19c
b2ae040b824b2dbe8578c668ea059b23a04ca660ff84099620c33371e96ffab3
GET /officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3177
last-modified: Thu, 11 Apr 2024 04:45:05 GMT
x-ms-request-id: be5abcfe-e01e-003b-5716-8fba33000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370697335,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16186477&TotalRTCDNTime=2&CompressionType=br&FileSize=3177"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js
87 kB URL res-1.cdn.office.net/officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (35141), with NEL line terminators
Hash 82f705f91af2ea420b27f69bd471d2ec
0a5e2a268e78e6e7686edc36440706efcb751cf9
dbfeecdd47494c888aa779eaa3962217986d6e319371b7615f76fe80dbdb6688
GET /officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 87203
last-modified: Sat, 20 Apr 2024 15:34:59 GMT
x-ms-request-id: b6f1e395-e01e-0059-0c4d-937814000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370697345,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16186481&TotalRTCDNTime=2&CompressionType=br&FileSize=87203"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js
200 OK 43 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (693)
Hash d818f3327b0f48d884d2f63cbe47ff5a
e19aa9f20077a1201a87abcbe4d20860519cd999
90fbd504db84cfd796afa34208831464aa2026aa5c07def6d2c8fe126279ecf7
GET /officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 42910
last-modified: Thu, 11 Apr 2024 04:43:59 GMT
x-ms-request-id: 0ad4c9c3-201e-0046-2616-8fcb10000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370697346,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.16186482&TotalRTCDNTime=2&CompressionType=br&FileSize=42910"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 6f371943-fd10-4064-95f4-4fb58113a0c2
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 52068
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 6f371943-fd10-4064-95f4-4fb58113a0c2
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: d084e983-f030-4bbb-a77f-f694e882b146
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:13 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 13 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 10563f3002ef4f3a1928b34f2b9460a8
1011e632f63c7ae819440753dad72353f3fa95fb
4004f66597a337a22b71d2f678aedd643830ba321f9665d6c6d26e7bdf6d8f12
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 9b469d11-1933-4b0c-94ad-b1c4f32eb767
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 139
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 13251
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9b469d11-1933-4b0c-94ad-b1c4f32eb767
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: fc70fbbb-2bd3-4c78-946e-1fc4b3721355
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0678181B1BE244538FA7B1E35B22EEC7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:13Z
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 25 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 794ff25b04d92b5b795a95e8a67df8de
bd881429d1dfe3dfe054d3490525079d4699e7e6
f1d96bf2c42f11222c6f048289d183554a4865914aafefe92cf73bb46bb85a59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714017613642
time-delta-to-apply-millis: 2514
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 60928
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 253
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:13 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js
200 OK 156 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Size 156 kB (156139 bytes)
Hash 6b34abb079232321fd1edc8e190fa95d
1f374b19fad3a90877226a50658e0da2e477020f
fc7d33d67b8de44a385fd49d712d042c3c73c512e335f7317bb3d74aa44327b7
GET /officeonline/pods/s/hFC7D33D67B8DE44A_PptScripts/wp5/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 156139
last-modified: Thu, 11 Apr 2024 04:58:41 GMT
x-ms-request-id: 0d94dfd5-b01e-0054-1227-8fb0c0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370697393,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017613.161864b1&TotalRTCDNTime=2&CompressionType=br&FileSize=156139"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: b197478e-6ae4-472a-87ac-e09237e02bb5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:13 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf
404 Not Found 215 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Hash 9895267e2619c2528addbab546479f5a
8f380018ce17344f4c0783a856d8a8c1a34f1866
b46c4babd4f8f6c6543df5b5b9eb21522c1ac16fa647a7c33d5f068c31c2fce6
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/segoeui.ttf HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 215
x-ms-request-id: bf417f13-201e-0053-3cc5-964b34000000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370698252,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.1618680c&TotalRTCDNTime=2&CompressionType=&FileSize=215"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/x-font-ttf
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js
200 OK 2.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (578)
Hash b2e29af1ea99f4b49315e93234f890d7
48c1a490a3def60cd312d5b37b27a945863b5f7c
0eb7adc9626775a4b1b81e6c5c6479a194cdf5cf096230025dde0dc85f22dcbc
GET /officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2883
last-modified: Thu, 11 Apr 2024 04:44:56 GMT
x-ms-request-id: 059b789a-701e-0016-4319-8f0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370698253,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.1618680d&TotalRTCDNTime=2&CompressionType=br&FileSize=2883"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js
138 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (64817)
Size 138 kB (137585 bytes)
Hash 1eb1a1db2b2c0356a2e7cee6f9c0a153
47386c986708eef6bc7b928eaff19cc44f917ba9
8d823abe65fe6f1af70da9209d536039d8145376bb029934e22e9c28bb6d16cb
GET /officeonline/pods/s/161760740507_PptScripts/officeExtensionMerge.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 137585
last-modified: Sun, 07 Apr 2024 22:18:09 GMT
x-ms-request-id: 58ed6b1d-d01e-0030-6722-8a4158000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370698254,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.1618680e&TotalRTCDNTime=2&CompressionType=br&FileSize=137585"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 27843e5b-eab0-41a2-89b3-f6d730249555
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 8298
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 27843e5b-eab0-41a2-89b3-f6d730249555
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 113b1638-897f-4267-91c9-9b202fb8b96f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:13 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js
96 kB URL res-1.cdn.office.net/officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (751)
Hash a02f72b86fab5256d0f1b6e9400d7e55
9f81df1a05dd9c232534d32eac68f89abeb511a6
76e51ee4326553e9829e3890f5d3a0f2def15f2502b076d37576de9df68e0318
GET /officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 95794
last-modified: Thu, 11 Apr 2024 04:45:10 GMT
x-ms-request-id: edb24d6c-301e-004a-1326-8f5c18000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370698255,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.1618680f&TotalRTCDNTime=2&CompressionType=br&FileSize=95794"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 144 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 281d4e0aae3a293e971ade4605c3b94b
90a56ebf9f9849d7bf4051b44953675871a32685
b317af3ba5f8961c1c7b190042f7967a4289029f3341a5979281bb3bf0a79bac
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 8afc6d79-181b-4bef-8267-b28e4c4097cb
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 516
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 144
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8afc6d79-181b-4bef-8267-b28e4c4097cb
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 9ea9aa8d-6008-482c-87fa-41ad79d70869
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: D28D304C2B89408BA1A5293009AD4D3B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:14Z
date: Thu, 25 Apr 2024 04:00:14 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 04:00:14 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/listAll_hier.json
80 kB URL fs.microsoft.com/fs/4.39/listAll_hier.json
IP
Hash 570a3464700c535899f161a98aace39a
34e8a553b79a4b503e713d84a7dc1e361729a335
9814d7e977b0d71a645e400515c4ccfa058d8af6dd941eb0f8ef66e320b2b11a
GET /fs/4.39/listAll_hier.json HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 19:59:59 GMT
Accept-Ranges: bytes
ETag: "0x23C04CEA074159BC5D58077E0DC242BED221AD8977E4F05F5E543636393509A5"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=listAll_hier.json; filename*=UTF-8''listAll_hier.json
X-MSEdge-Ref: Ref A: 5AEA619E60C94CB385A4B6BE5DADB565 Ref B: LON04EDGE1009 Ref C: 2024-04-17T06:39:37Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79450
Cache-Control: public, max-age=44230
Date: Thu, 25 Apr 2024 04:00:14 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 24 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714017613915
time-delta-to-apply-millis: 2591
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2637
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 730
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:14 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h6D07E05D82C491AF_PptScripts/1033/powerpoint-slideshow-strings.js
967 B URL res-1.cdn.office.net/officeonline/pods/s/h6D07E05D82C491AF_PptScripts/1033/powerpoint-slideshow-strings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (4796)
Hash 4a1895e93bd99f8e9e42bd9be6c0e2f8
8fafacb5c6fea2a42d67460d3a74ea19edbdb36b
6d07e05d82c491af9a5a60bd85d42762279d0993b3bf6a353fa9be4b92795bbd
GET /officeonline/pods/s/h6D07E05D82C491AF_PptScripts/1033/powerpoint-slideshow-strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 967
last-modified: Fri, 19 Apr 2024 19:18:30 GMT
x-ms-request-id: e3173871-101e-005d-3f9f-92f513000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699803,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e1b&TotalRTCDNTime=2&CompressionType=br&FileSize=967"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h9EE332DCC6B70B18_PptScripts/slideshowcore.min.js
362 kB URL res-1.cdn.office.net/officeonline/pods/s/h9EE332DCC6B70B18_PptScripts/slideshowcore.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 362 kB (362500 bytes)
Hash eefa65f51630ca4c9a021fc2835ab5c9
a5cfbd120f6553273c4fd387102931787acacdaf
9ee332dcc6b70b1830e768b05f40af180c71bb5391fdfe612eff12d9d8fe1bec
GET /officeonline/pods/s/h9EE332DCC6B70B18_PptScripts/slideshowcore.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 362500
last-modified: Thu, 11 Apr 2024 04:45:21 GMT
x-ms-request-id: 5a3cd880-901e-0053-651e-8fdca3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699807,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e1f&TotalRTCDNTime=3&CompressionType=br&FileSize=362500"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0242289DAE2BE98F_PptScripts/podsproxy.min.js
200 OK 17 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h0242289DAE2BE98F_PptScripts/podsproxy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64569), with no line terminators
Hash 4af44519b9aed12b6fc512d2ec9e4e0b
254827e6e423355961c7f3bb755b7fcdd5e3c4fb
0242289dae2be98f7fa3b7427ec85c81c2b7907c50f2ead6755db0cc9ee80dc8
GET /officeonline/pods/s/h0242289DAE2BE98F_PptScripts/podsproxy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16664
last-modified: Sat, 20 Apr 2024 05:31:44 GMT
x-ms-request-id: b7630aa3-201e-0056-49e7-920e78000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699812,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e24&TotalRTCDNTime=3&CompressionType=br&FileSize=16664"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDEFCEF615F0F8E58_PptScripts/pptspeechclient.min.js
200 OK 19 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hDEFCEF615F0F8E58_PptScripts/pptspeechclient.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 08618a2ff167e332e76e0b29ba3dc034
8d6b357f821cb5f497ae47a534b4eb9fe0eada51
defcef615f0f8e58a10c23285979968c88f65fe5b95270101a025ecd5ad5d1eb
GET /officeonline/pods/s/hDEFCEF615F0F8E58_PptScripts/pptspeechclient.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18919
last-modified: Fri, 19 Apr 2024 19:09:14 GMT
x-ms-request-id: 87748e6e-e01e-003b-0b92-92ba33000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699818,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e2a&TotalRTCDNTime=3&CompressionType=br&FileSize=18919"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h45D8827D8E4B1A12_PptScripts/1033/powerpoint-slideshow-toolbar-strings.min.js
579 B URL res-1.cdn.office.net/officeonline/pods/s/h45D8827D8E4B1A12_PptScripts/1033/powerpoint-slideshow-toolbar-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (2168), with no line terminators
Hash b2ed2e025127538448906805a81a85fb
36389b98f617168e9d35b8fca326a0bc23949753
45d8827d8e4b1a1299ecb15584657bf6be82efaaab13efa36886db6ceb7a7758
GET /officeonline/pods/s/h45D8827D8E4B1A12_PptScripts/1033/powerpoint-slideshow-toolbar-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 579
last-modified: Sun, 21 Apr 2024 17:22:59 GMT
x-ms-request-id: ae9a89db-e01e-0004-7b1f-947290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699835,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e3b&TotalRTCDNTime=2&CompressionType=br&FileSize=579"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hEF748821F9BE2760_PptScripts/wp5/voiceUI.min.js
200 OK 3.7 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hEF748821F9BE2760_PptScripts/wp5/voiceUI.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (11817)
Hash 6944ce689cf2ba94e74b94f1a366fb30
ab04172a42f652daeae482e08214f1b640dbcb03
ef748821f9be2760fe573d7dbdd5ca83c3e8db7efc1dc618e3d766fa9ce8f05c
GET /officeonline/pods/s/hEF748821F9BE2760_PptScripts/wp5/voiceUI.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3704
last-modified: Thu, 11 Apr 2024 04:57:42 GMT
x-ms-request-id: 07e50be6-701e-0006-38b9-90cc28000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699841,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e41&TotalRTCDNTime=2&CompressionType=br&FileSize=3704"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h2EF78484BE3B1FF6_PptScripts/wp5/cameraUI.min.js
3.8 kB URL res-1.cdn.office.net/officeonline/pods/s/h2EF78484BE3B1FF6_PptScripts/wp5/cameraUI.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (12216)
Hash 52f1db8112cab4dac3c79ebcf8c0acf8
5ec7449c3875ed019e38084626629f2b81abc3bd
2ef78484be3b1ff6883bd3af7529b4defa60437bd5b7328a5727f749ca968583
GET /officeonline/pods/s/h2EF78484BE3B1FF6_PptScripts/wp5/cameraUI.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3782
last-modified: Thu, 11 Apr 2024 04:51:28 GMT
x-ms-request-id: 25b67720-001e-0041-7d63-8ea773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:14 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370699842,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017614.16186e42&TotalRTCDNTime=2&CompressionType=br&FileSize=3782"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=74a1b408-09ca-4051-ac46-d604a0bd9d63
200 OK 16 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=74a1b408-09ca-4051-ac46-d604a0bd9d63
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 537d3351456cffa7f1a3e7a78c75de86
c21b395b5f4f0754571256c7826689bebafe2323
5325544a5fccc7039e0be66803f05540d7d743fe5805d7134afb035361fa79a5
POST /pods/PowerPoint.ashx?action=74a1b408-09ca-4051-ac46-d604a0bd9d63 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 43c3b8ac-1eeb-4308-b239-f7ce77ed7bca
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 15462
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 43c3b8ac-1eeb-4308-b239-f7ce77ed7bca
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f0d60ffd-8b04-4ecc-ae58-145758d4a616
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6C51E76038B84AC79A80D9A1C8B7C292 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:14Z
date: Thu, 25 Apr 2024 04:00:14 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js
13 kB URL res-1.cdn.office.net/officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (700)
Hash 78d17306c062c4107ac0f0b87e508b9d
1a8f7d1ee9be35f90b21d48c08c13c8ec5f1f758
d80cb4198e3d7ea51e8be386f495bf1cd8f5a2c01c6dd1421eef20543a3501d7
GET /officeonline/pods/s/hD80CB4198E3D7EA5_PptScripts/ppteditDS.presence.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13054
last-modified: Thu, 11 Apr 2024 04:44:37 GMT
x-ms-request-id: fb573367-901e-001e-5815-8f134f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701175,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187377&TotalRTCDNTime=2&CompressionType=br&FileSize=13054"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 16297
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5693b377-981b-43a3-b364-7d9bf25b8e35
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 8020efb4-414c-4192-b262-81fe81cdc339
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 5FA86261ED0948BF8CACB0F28EEAEA32 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:14Z
date: Thu, 25 Apr 2024 04:00:14 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 191 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9bf2e9b5504f56421b26daa7dd7181bc
7a04cea5c13dddde1520216a43ff0579b69345f2
b815726995e95d32df30766b5c8e445e2b46927ab4ea8795b13e4644f7ef4fc9
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 75e585a0-d375-4684-a219-21abd98d38ff
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 131
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 191
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 75e585a0-d375-4684-a219-21abd98d38ff
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 00900560-d67d-484d-a82f-f584baf3f393
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F3BD252676AC4B1EAFAC999F5F46C3B7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:14Z
date: Thu, 25 Apr 2024 04:00:14 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/hier_officeFontsPreview.ttf
200 OK 1.1 MB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/hier_officeFontsPreview.ttf
IP
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 10 tables, 1st "OS/2", name offset 0x1e5144
Size 1.1 MB (1064259 bytes)
Hash e5223ac9cb2716d1c490cb0e41a954b6
e370e858bac68d8ab6e9363ee4516aad1ee3ebf3
096791f1856261c77f26b7e21fc308928b3b4408f8b65cfb75ae2ee531a7da30
GET /fs/4.39/hier_officeFontsPreview.ttf HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 19:59:59 GMT
Accept-Ranges: bytes
ETag: "0x5F60582A198E86B6266380C440912E010A0AEF376C639C18AFAB95D4D1A11AFF"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=hier_officeFontsPreview.ttf; filename*=UTF-8''hier_officeFontsPreview.ttf
X-MSEdge-Ref: Ref A: 8156BB6F743A46A89E4156AA31EBA439 Ref B: LON04EDGE1009 Ref C: 2024-04-17T06:39:38Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1064259
Cache-Control: public, max-age=44160
Date: Thu, 25 Apr 2024 04:00:15 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 6a9d510d-a683-486b-807f-7fb9c2578a94
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:14 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=7e855e82-6af3-46a8-b37d-4bd13018967f
3.1 kB URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=7e855e82-6af3-46a8-b37d-4bd13018967f
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 0b9b785b7829658f75e322e57589e2db
f065d7d6d55558d66066b01102981d4ebc8b35f0
0982cde9ba091121d2efe8631e3e33041e52259a36602db71b94534c2383858a
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=7e855e82-6af3-46a8-b37d-4bd13018967f HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 5791b20d-2c65-4537-9ab2-ce5dd7561d79
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1516
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 3141
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5791b20d-2c65-4537-9ab2-ce5dd7561d79
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: b89d580a-2e72-4c99-800d-95daa192a1be
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 368EAD917B9F421E9883ABE6EEFC19E7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
200 OK 795 B URL POST HTTP/2 powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 455aead829d846034949fd6f4e37eeca
b3d11eb500f23606cb7ec8008209fcd180f9533b
cb5216e55741cf42ee4b19b3c198263e9e07d5e376e92c1791d2285b9df100af
POST /pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: 2deb768d-ddef-45f0-ac8a-52579172320c
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-DocumentSessionCluster: PNL1
X-UsePopsRole: true
X-PopsAffinityRoutingEnabled: false
X-PopSessionId: nhlagui6gsryjpuva
X-WacSessionStartTime: Thu, 25 Apr 2024 04:00:03 GMT
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmN0FgvGDLNDToBVHmp8pZouAAAAAAAAAAAAAAAAAAAAAAAAAABvBjJgxaL5XWC63yDt6CsK0
RequestTimeout: 10000
X-PodInstance: am4pepf0002d704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 714
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 795
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2deb768d-ddef-45f0-ac8a-52579172320c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 946E8CD7B1834EC380E3883C93664963 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hB3D42451CBC3D2A2_PptScripts/ppteditDS.sortergrid.js
4.5 kB URL res-1.cdn.office.net/officeonline/pods/s/hB3D42451CBC3D2A2_PptScripts/ppteditDS.sortergrid.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (598)
Hash b7baf9ffaaa9ba4d994579a8203caa9f
4993857fbe89cf719ffb096f8d6b8ec1e41fce4a
b3d42451cbc3d2a2712efdabca412995cced3a1b236e2f2cafbc71fb2e6b5327
GET /officeonline/pods/s/hB3D42451CBC3D2A2_PptScripts/ppteditDS.sortergrid.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4478
last-modified: Thu, 11 Apr 2024 04:43:20 GMT
x-ms-request-id: e2332ce8-701e-0029-2215-8fc1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701177,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187379&TotalRTCDNTime=2&CompressionType=br&FileSize=4478"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetSessionUTC
200 OK 148 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetSessionUTC
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 0fca51d059c2fd8767557fa995224024
c1e2cf9620112ec55f41d1d613d8e4dad3fa9b6a
74bf967c0a705367fde7312d20cd1f558ab4f22f375c8055ecf08351da2b2efd
POST /pods/podedit.svc/jsonAnonymous/GetSessionUTC HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: a9c916c5-6b6f-4aec-9387-eb24f8c5ee6b
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 21
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 148
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a9c916c5-6b6f-4aec-9387-eb24f8c5ee6b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 8bc726bf-2dd7-47dd-8f8c-9dd43d55817a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2138094C0E3C489099C203794FD2CF58 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: b7393daf-a86b-45fe-a918-35e25afc40d9
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53202
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b7393daf-a86b-45fe-a918-35e25afc40d9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: d7bcea25-1804-4dcb-aeff-08b61a6c3c4a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:14 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 2.5 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 78aa7aae71b60eb4655fbf1c8de86149
3203251a7e128ee9072cb4e3ca52f890878378a2
a71d2291a0e208e2063680edf6572ea67fdb808a496f62b688f20eb4fb9af333
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: fd15d407-e3a4-40af-826c-b499b55c01a4
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 140
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2512
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fd15d407-e3a4-40af-826c-b499b55c01a4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 4329fbe1-8878-4351-92fa-015ba6007dd0
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 50D46458E9EB436085F318256A942864 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hB8B408CEAE587C5B_PptScripts/ppteditDS.uploaddocument.js
6.8 kB URL res-1.cdn.office.net/officeonline/pods/s/hB8B408CEAE587C5B_PptScripts/ppteditDS.uploaddocument.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1515)
Hash 3ed0a89594bd5a8db83b506808526692
1083089d06673da1864e8e471aa80d370b4db13a
b8b408ceae587c5bfd35f91e14aa23090ff9cc417947644b0e63ce790f8d5bc6
GET /officeonline/pods/s/hB8B408CEAE587C5B_PptScripts/ppteditDS.uploaddocument.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6803
last-modified: Thu, 11 Apr 2024 04:45:54 GMT
x-ms-request-id: 5f5ebb18-a01e-002a-4b27-8f2087000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701178,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.1618737a&TotalRTCDNTime=2&CompressionType=br&FileSize=6803"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h7AFCE20EE190CD94_PptScripts/1033/powerpoint-discoverability-strings.min.js
675 B URL res-1.cdn.office.net/officeonline/pods/s/h7AFCE20EE190CD94_PptScripts/1033/powerpoint-discoverability-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (2249), with no line terminators
Hash 508224ea98530cb4d1a9a53b00630bc7
b08535f129f5300bf7aedc2eaae9ab7be7008afd
7afce20ee190cd9416025ff8cc50d39053ac805a2bbcee0fb713e803f2cabdc8
GET /officeonline/pods/s/h7AFCE20EE190CD94_PptScripts/1033/powerpoint-discoverability-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 675
last-modified: Sun, 21 Apr 2024 17:23:32 GMT
x-ms-request-id: c3d4c754-601e-0035-021f-949383000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701208,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187398&TotalRTCDNTime=2&CompressionType=br&FileSize=675"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 6.0 kB URL GET HTTP/3 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 4e27c40ec2621a6b22f20c3a45cddae6
d5a1cc6dd262fb44ae1b4db465f6534b9873bea5
4aaee4412ee150ed5291eef4d1d49cc6c69e6bd9a79e6d3ef2a66633d81772df
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: c0d1d88a-7b0d-4f03-9ee8-9c2ac108335c
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
content-length: 6032
akamai-request-bc: [a=23.36.79.39,b=370701209,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187399&TotalRTCDNTime=2&CompressionType=&FileSize=30746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=5, origin; dur=0 , cdntime; dur=5
akamai-cache-status: Miss from child, Hit from parent
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/rawguids/35148505830
200 OK 87 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/35148505830
IP
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 18 tables, 1st "LTSH", 46 names, Macintosh, ITC Franklin Gothic is a trademark of The International Typeface Corporation which may be regis
Hash 10a0821471f6994cb61a80fe07525a64
7346294981d19121b96cbd547d35160d0ce122fd
c4ebefc1f88afbb6f7c44105dadab3fcfa4d75a8925ee9f3ede0c42f42ce8d23
GET /fs/4.39/rawguids/35148505830 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:38:56 GMT
Accept-Ranges: bytes
ETag: "0x09751C821EC2A24580E8775213B33C274D2C6598EB6A316755B0696A508F015E"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=35148505830; filename*=UTF-8''35148505830
X-MSEdge-Ref: Ref A: D34B5BFBF8454D829BD76D289AB46698 Ref B: LON04EDGE1118 Ref C: 2024-04-17T06:42:25Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 86634
Cache-Control: public, max-age=45623
Date: Thu, 25 Apr 2024 04:00:15 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: c235cac7-2ff3-48f5-ad72-565bbf634ef2
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:14 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css
135 B URL res-1.cdn.office.net/officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash dba626c693106b9f35fa0768b03f4294
0e8f799026ae3636b4ee6c666b2d14b71388c282
7231d25545dcdc23dc51854c7667eadbce50a9d0e2da485f85e9aa4f906583ed
GET /officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 135
content-type: text/css
last-modified: Mon, 22 Apr 2024 16:35:56 GMT
x-ms-request-id: b7d4efe3-f01e-0045-4ed6-942a74000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370703409,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187c31&TotalRTCDNTime=3&CompressionType=br&FileSize=135"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 143 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d5c27dfaa8fef3acc33e469ccc2b125a
038843bf308948955ec1d87698dab8827ba7ba0e
b07601878ada73fafaaab2a237454f4e53e41670fd1d24bf3adab1e4fa749798
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 992
SlideHeight: 558
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 71791f72-ddc1-48fb-b2d4-ad60413c9199
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 720
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 143
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 71791f72-ddc1-48fb-b2d4-ad60413c9199
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f390ba84-d513-4fef-9cd6-4f26037154ea
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 58B0689735034C25BD06F71D27CC490C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hDBDBD41C58E1212B_PptScripts/ppteditDS.ext-text.js
447 kB URL res-1.cdn.office.net/officeonline/pods/s/hDBDBD41C58E1212B_PptScripts/ppteditDS.ext-text.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1775)
Size 447 kB (446751 bytes)
Hash 6cdddb043a5aed620a2d043364a41b32
d44f692028126ba51db5fbe860a57f4838736a2b
dbdbd41c58e1212b014f9970b6821cabbe35240ea86bb2eadd97640359f45789
GET /officeonline/pods/s/hDBDBD41C58E1212B_PptScripts/ppteditDS.ext-text.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 446751
last-modified: Thu, 11 Apr 2024 04:44:37 GMT
x-ms-request-id: 541b33c6-a01e-0067-5758-8eef6b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701210,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.1618739a&TotalRTCDNTime=2&CompressionType=br&FileSize=446751"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
18 kB URL res-1.cdn.office.net/officeonline/pods/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4de42314d6edda70df9779762acc12b8
2af63137abc68c0910107f8598b7de48fd5bbd9c
7e86df2ac06e3524cb7bc6f0b8eb07565ba6d103eaf3cf1a30ac4c78f11a4eaa
GET /officeonline/pods/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18308
last-modified: Sat, 20 Apr 2024 05:45:47 GMT
x-ms-request-id: 7de58955-301e-0028-5fe7-929e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701211,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.1618739b&TotalRTCDNTime=2&CompressionType=br&FileSize=18308"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js
825 B URL res-1.cdn.office.net/officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1875)
Hash 8251b806229b7f47e708af88ab59a0f9
290bd10d11c203db80503b250b888902f83e9c5f
66a46a92ff62d7a42a87644d93cb2071340c9eae2169ae1f3f5f6f954949b286
GET /officeonline/pods/s/h66A46A92FF62D7A4_PptScripts/wp5/uiFabricLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 825
last-modified: Thu, 11 Apr 2024 04:51:49 GMT
x-ms-request-id: 66a4cf16-401e-0050-397b-8e3dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701212,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.1618739c&TotalRTCDNTime=2&CompressionType=br&FileSize=825"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hB7EC36D108F144AE_PptScripts/wp5/slideshowToolbar.min.js
200 OK 25 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hB7EC36D108F144AE_PptScripts/wp5/slideshowToolbar.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 9ac21122274030722507e5911611bc36
980687c6e29e66b98ba197420e963bfa7bc97a79
b7ec36d108f144aeee310d4b54426c92edd188f68e0b7a948e21484001493605
GET /officeonline/pods/s/hB7EC36D108F144AE_PptScripts/wp5/slideshowToolbar.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24816
last-modified: Thu, 11 Apr 2024 04:54:30 GMT
x-ms-request-id: 4302af3b-a01e-0015-429c-8ce824000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370703400,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187c28&TotalRTCDNTime=2&CompressionType=br&FileSize=24816"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hF45EE4A14735BD88_PptScripts/wp5/inkButton.min.js
7.7 kB URL res-1.cdn.office.net/officeonline/pods/s/hF45EE4A14735BD88_PptScripts/wp5/inkButton.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (32707)
Hash 45534ea047dbf89c6c777475ebc45905
4ae8acef0a44075434be4289a82666ee41e41425
f45ee4a14735bd88ae6455081e7bd9601b616906e76127a4e0fe6fbc58258da4
GET /officeonline/pods/s/hF45EE4A14735BD88_PptScripts/wp5/inkButton.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7670
last-modified: Sun, 21 Apr 2024 06:09:35 GMT
x-ms-request-id: f6a7566c-d01e-000f-03dc-9489fb000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370703401,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187c29&TotalRTCDNTime=2&CompressionType=br&FileSize=7670"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=50b5bb26-8cf0-4c97-8855-d7538f89878e&waccluster=PNL1&Iid=sid257%2Fcid898213461%2Fsldw992%2Fsldh558%2Fver4%2Fsl&Iid=sid256%2Fcid1462152450%2Fsp2%2Fsldw960%2Fsldh540%2Fver14%2Ftx&Iid=sid256%2Fcid1462152450%2Fsldw960%2Fsldh540%2Fver14%2Fsl&Iid=sid257%2Fcid898213461%2Fsldw960%2Fsldh540%2Fver20%2Fsl
13 kB URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=50b5bb26-8cf0-4c97-8855-d7538f89878e&waccluster=PNL1&Iid=sid257%2Fcid898213461%2Fsldw992%2Fsldh558%2Fver4%2Fsl&Iid=sid256%2Fcid1462152450%2Fsp2%2Fsldw960%2Fsldh540%2Fver14%2Ftx&Iid=sid256%2Fcid1462152450%2Fsldw960%2Fsldh540%2Fver14%2Fsl&Iid=sid257%2Fcid898213461%2Fsldw960%2Fsldh540%2Fver20%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b09264d556dc35cd64046e4dc0fba3b1
91b1fbe9838705f5a16b0b02419a88206435e684
d8ab720b5b2550b38bc579a9137b8f7d86ee014f1610c62b5488071d695fd7f2
GET /pods/images.ashx?si=undefined&action=50b5bb26-8cf0-4c97-8855-d7538f89878e&waccluster=PNL1&Iid=sid257%2Fcid898213461%2Fsldw992%2Fsldh558%2Fver4%2Fsl&Iid=sid256%2Fcid1462152450%2Fsp2%2Fsldw960%2Fsldh540%2Fver14%2Ftx&Iid=sid256%2Fcid1462152450%2Fsldw960%2Fsldh540%2Fver14%2Fsl&Iid=sid257%2Fcid898213461%2Fsldw960%2Fsldh540%2Fver20%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: ddbf3a74-ee28-4372-82e5-e8aedefef567
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 13134
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "64686230"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ddbf3a74-ee28-4372-82e5-e8aedefef567
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 785b509f-9dfa-4055-8c7c-b60eb92358ef
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 546FB50693674052B330468E0F985DB8 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=eefa8825-6943-49b0-a514-c8e1c615b229
18 kB URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=eefa8825-6943-49b0-a514-c8e1c615b229
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 17684ea063a6d6ea2cb6f7a4aac16b0d
94798aba34f317e84cba2538e7a9ec1b5b0a4e79
17666fa193c0f2eb24797e7438aaa67fabbe4686a33400ffcc3badb7ae7e29e4
POST /pods/PowerPoint.ashx?action=eefa8825-6943-49b0-a514-c8e1c615b229 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 53f1380a-8b05-48e2-bbd6-fd5eabcfb985
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 18466
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 53f1380a-8b05-48e2-bbd6-fd5eabcfb985
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: e4f211e4-f3b5-49e9-b74b-29b1218aff09
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: F3B0DCD090424B6AA3333D9437051893 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: cfc1d46f-66da-4af5-a28b-eb9359be29b7
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 23379
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: cfc1d46f-66da-4af5-a28b-eb9359be29b7
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 96258f40-0d04-459d-a89a-7d0beb4b4216
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:14 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h337C9415D546F458_PptScripts/wp5/optionsButton.min.js
4.8 kB URL res-1.cdn.office.net/officeonline/pods/s/h337C9415D546F458_PptScripts/wp5/optionsButton.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (16442)
Hash 34e55a56fb0847e74546aa3feb2879f0
0f7027cccde33181eac67bc97463090031985e61
337c9415d546f45872e2266bda1cecf55ff94c9a7cfb029e3e46ba2c50f90e58
GET /officeonline/pods/s/h337C9415D546F458_PptScripts/wp5/optionsButton.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4830
last-modified: Thu, 11 Apr 2024 04:49:17 GMT
x-ms-request-id: 1dba255f-201e-0056-3dad-8c0e78000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370703402,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187c2a&TotalRTCDNTime=2&CompressionType=br&FileSize=4830"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js
46 kB URL res-1.cdn.office.net/officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (681)
Hash 8e9627eeca3be1baad710a62be437c00
bbcc4fb39a0c3594c5aa73eef820e26efcfee27e
f69754f67bfdc5141cf098bedbca70adafb1b3c9d4a6e9f6fbbbac4c4184ecb2
GET /officeonline/pods/s/hF69754F67BFDC514_PptScripts/ppteditDS.presence1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 45725
last-modified: Thu, 11 Apr 2024 04:44:35 GMT
x-ms-request-id: a0d8f418-401e-0040-5325-8ff8af000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370703403,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187c2b&TotalRTCDNTime=2&CompressionType=br&FileSize=45725"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 52af792134b43bb66ac6fb020ec0b324
7b8a12118ee106daa8fcece7625d1de871835a21
e08ca1be8adf907921f594f700e9267582333ba0a4337c820e8c937989301574
GET /officeonline/pods/s/161760740507_PptScripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4407
last-modified: Sun, 07 Apr 2024 22:33:57 GMT
x-ms-request-id: 0e97b08b-601e-0068-5732-8a9907000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370704914,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017616.16188212&TotalRTCDNTime=2&CompressionType=br&FileSize=4407"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config
200 OK 1.3 kB URL POST HTTP/2 powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4214f535a29274f17e1c41e53c83b0f2
604319289d29f0fd3343a10660ec05388a098c2b
9a5f66dadb0b88fcbdf6233f92ccad8eb89824104be5a42173a0840d9ee1c74e
POST /p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: e3ca0260-d378-465f-bc7a-918eaef7f0fb
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
Content-Length: 261
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1324
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e3ca0260-d378-465f-bc7a-918eaef7f0fb
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67D
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D67D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: C003076B17514D239B82E9CC8DB8801B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.core.js
76 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Hash 79ed514099f72d58fb94c36103c1c042
efd455f22075eaf6a4d2b31e817982f16736cc8a
dc666fd19c8b4bcec16e659b552f5b8ae7b9696dbb302140986cb3efae27146f
GET /officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76243
last-modified: Sun, 07 Apr 2024 22:34:09 GMT
x-ms-request-id: 0e4523c3-b01e-0044-7f22-8a75a8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370704915,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017616.16188213&TotalRTCDNTime=2&CompressionType=br&FileSize=76243"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 596
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fcfb66fe-69d6-421a-8655-d5593ec8124d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: BL6PEPF00021A2C
x-officeversion: 16.0.17615.40511
x-officecluster: PGTUS6
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 0917be54-35a4-476b-807c-746abc4ce89c
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTUS6&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BL6PEPF00021A2C
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: B7DFBE6437214746955489E64A6036BB Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:16 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=20ddea1d-36fd-41e1-aa9a-d862e0f5a1e3
305 B URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=20ddea1d-36fd-41e1-aa9a-d862e0f5a1e3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 6ca1f93500f2b1c66cdbe0f071c389c1
8c5aec3635b37d08315cadf75a97e04f9e505cef
926d009cce08481468c77d73b103228dd3532d38a50369abcf69a0f19375d0a8
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=20ddea1d-36fd-41e1-aa9a-d862e0f5a1e3 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: e0ba6f77-af03-4ad0-830c-8392909ff3ce
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1542
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 305
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e0ba6f77-af03-4ad0-830c-8392909ff3ce
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: a66447c3-98ff-446b-a884-5fbf447621ac
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: D426C6626B2F4103AAF63026C55FFA1A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bb0a5323-941d-4b13-9d9d-ed29711bc9e4
x-usersessionid: bb0a5323-941d-4b13-9d9d-ed29711bc9e4
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 5690a08d-051c-4e51-bd40-e3b5d698fbd1
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1ED5936B9FB443D28C4290DCB85C76DE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1bb7a8aa-89b8-48c9-9291-40ebe44189d4
x-usersessionid: 1bb7a8aa-89b8-48c9-9291-40ebe44189d4
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: a49ae199-3c58-4cf9-a611-ddf28aca6b03
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 4968646FCD5A4E8F8927EEA75EAD304D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hAD21D8A56C03EC5D_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
200 OK 124 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hAD21D8A56C03EC5D_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65443)
Size 124 kB (124178 bytes)
Hash 9fff1a71f430529a2234d6651b332078
84ce12fd1930b804c15521300f7e209ce96543e1
ad21d8a56c03ec5d9d00437b297110572af10136d5ddfa9bcd2abea6e174eab2
GET /officeonline/pods/s/hAD21D8A56C03EC5D_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 124178
last-modified: Thu, 18 Apr 2024 16:19:49 GMT
x-ms-request-id: e0282a11-001e-0033-4819-94a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370705349,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017616.161883c5&TotalRTCDNTime=2&CompressionType=br&FileSize=124178"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 7402768b-b6ca-471c-8729-8099b11a066d
x-usersessionid: 7402768b-b6ca-471c-8729-8099b11a066d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 79f6652f-f5a2-4eb9-8a4f-45cf9d7a1f08
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 561A4E5D606641C3B71925EC84DEF2E5 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 5852
content-type: image/png
expires: -1
etag: undefinede1ea81ef-6ea9-4b30-a312-76463cd780eb.png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: a027ea48-82d4-4717-ae0e-1a2c43509231
x-usersessionid: a027ea48-82d4-4717-ae0e-1a2c43509231
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3b8d695a-e368-4f0e-8f3f-94c721fd97ec
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 6F61EE4B43414113BD4F0467272DE459 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c57518d7-7625-49db-87c3-e708975d6688
x-usersessionid: c57518d7-7625-49db-87c3-e708975d6688
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 527b83fc-8ebe-426c-96ae-a33ed1210d21
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D3F8C7F814C644A38C149F0F8AFD8597 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 29237491-53a6-4b7a-ba5e-9ee4689b0f0d
x-usersessionid: 29237491-53a6-4b7a-ba5e-9ee4689b0f0d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ae018fff-3148-404d-971f-eafc6415060a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F2BC25037B3D4E4AA1A1712A01615CEE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 94817fe3-bc0c-4dab-ac12-7d60e6b89804
x-usersessionid: 94817fe3-bc0c-4dab-ac12-7d60e6b89804
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ecfdada2-f7c8-4e5b-a343-2939457fa602
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: F1834E278994495085D39E5622AA758C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fdac7367-3522-4b0e-9f5c-a269a3c564b3
x-usersessionid: fdac7367-3522-4b0e-9f5c-a269a3c564b3
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 9bb839d7-8462-4f7b-8b6e-921b3b32d459
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E550EF250F064CF2BD19C87440A49E77 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/WebSocketFrontDoorServiceHandler.ashx?waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&wdoverrides=DevicePixelRatio%3A1%2CRenderGIFSlideShow%3Atrue
0 B URL powerpoint.officeapps.live.com/pods/WebSocketFrontDoorServiceHandler.ashx?waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&wdoverrides=DevicePixelRatio%3A1%2CRenderGIFSlideShow%3Atrue
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pods/WebSocketFrontDoorServiceHandler.ashx?waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&wdoverrides=DevicePixelRatio%3A1%2CRenderGIFSlideShow%3Atrue HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://powerpoint.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RbHWFU/QDy1OA5cXEkfRuw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
Set-Cookie:
X-CorrelationId: 15d8dbd5-2af9-4070-9b4f-fc1e580b4cc7
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0002D6DA
X-OfficeVersion: 16.0.17607.40507
X-OfficeCluster: PNL1
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://powerpoint.officeapps.live.com
Document-Policy: js-profiling
Access-Control-Expose-Headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 2202e3e6-676d-4322-a0da-7a526cec2cbb
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
Reporting-Endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
Sec-WebSocket-Accept: FWp8j8tYoGoy58q5cnQhNHCO9Qc=
X-OFFICEFD: AM4PEPF0002D6DA
X-Cache: CONFIG_NOCACHE
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
X-MSEdge-Ref: Ref A: A434ACA5EC594ED9B4F4800400C9BDD2 Ref B: SVG20EDGE0418 Ref C: 2024-04-25T04:00:16Z
Connection: Upgrade
Date: Thu, 25 Apr 2024 04:00:16 GMT
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 18e3ee4f-5e2d-4249-a694-1a953f164326
x-usersessionid: 18e3ee4f-5e2d-4249-a694-1a953f164326
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: d20ef084-8f0f-4370-865f-f2a4590839f3
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 6D8894D4FAC9418DABAAF30F9039E7BF Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3e46a565-5d5c-42d4-9bf9-c8750de3f710
x-usersessionid: 3e46a565-5d5c-42d4-9bf9-c8750de3f710
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: a20bfe94-f676-4d88-8c93-2bb6d30c1c1d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 7C7E94F3B9114545890D1FE99148B141 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 509d5e69-f292-4bd6-8968-44afccedcacd
x-usersessionid: 509d5e69-f292-4bd6-8968-44afccedcacd
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 6bb9b478-c437-4548-bde8-29bf811d12e1
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D361FD7AC1F04FE38DDF5674E64DE62A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
200 OK 1.5 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash f0e2ff97d96924b914189f6125b5b1df
97bcd8174e896990cddcfd200272f18f8be7355f
4ea66beab4ff966d4bc7a906523c5520ec7773bcc380cab1e086efb04d472c21
POST /pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-CorrelationId: b64beec2-4940-4b83-8c1f-35c49deb78d5
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-DocumentSessionCluster: PNL1
X-UsePopsRole: true
X-PopsAffinityRoutingEnabled: false
X-PopSessionId: nhlagui6gsryjpuva
X-WacSessionStartTime: Thu, 25 Apr 2024 04:00:03 GMT
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmN0FgvGDLNDToBVHmp8pZouAAAAAAAAAAAAAAAAAAAAAAAAAABvBjJgxaL5XWC63yDt6CsK0
RequestTimeout: 10000
X-PodInstance: am4pepf0002d704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 740
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1483
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b64beec2-4940-4b83-8c1f-35c49deb78d5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D738
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D738
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: EF356B1200724DE6BDED809325787C30 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 2.5 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 78aa7aae71b60eb4655fbf1c8de86149
3203251a7e128ee9072cb4e3ca52f890878378a2
a71d2291a0e208e2063680edf6572ea67fdb808a496f62b688f20eb4fb9af333
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 45c84495-7125-46fb-856e-83e3bab1bb70
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 140
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2515
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 45c84495-7125-46fb-856e-83e3bab1bb70
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 58dfef07-36c8-4a45-b625-f3c75e4e9b53
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-lastpodrclocation: AM4PEPF0002D704
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 858A60866158408FA46EB36582655F30 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3c757c80-35cd-4a45-b747-c1b0bf023ce3&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fth&Iid=sid261%2Fcid3069746641%2Fth&Iid=sid256%2Fcid1462152450%2Fth&Iid=sid265%2Fcid992504772%2Fth&Iid=sid259%2Fcid4228412110%2Fth&Iid=sid264%2Fcid3627650680%2Fth&Iid=sid263%2Fcid977679593%2Fth&Iid=sid262%2Fcid3752366348%2Fth&Iid=sid258%2Fcid590798761%2Fth&Iid=sid257%2Fcid898213461%2Fth
200 OK 24 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3c757c80-35cd-4a45-b747-c1b0bf023ce3&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fth&Iid=sid261%2Fcid3069746641%2Fth&Iid=sid256%2Fcid1462152450%2Fth&Iid=sid265%2Fcid992504772%2Fth&Iid=sid259%2Fcid4228412110%2Fth&Iid=sid264%2Fcid3627650680%2Fth&Iid=sid263%2Fcid977679593%2Fth&Iid=sid262%2Fcid3752366348%2Fth&Iid=sid258%2Fcid590798761%2Fth&Iid=sid257%2Fcid898213461%2Fth
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4bd52a07abebcf42a5a25566e5bc4be8
b561101e2747eeba0c3b14673398705435936a6c
049fec717fa489f56d99edc3a843ecaa2d80d4db2fc628bba5b2ed2e4a4949e2
GET /pods/images.ashx?si=undefined&action=3c757c80-35cd-4a45-b747-c1b0bf023ce3&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fth&Iid=sid261%2Fcid3069746641%2Fth&Iid=sid256%2Fcid1462152450%2Fth&Iid=sid265%2Fcid992504772%2Fth&Iid=sid259%2Fcid4228412110%2Fth&Iid=sid264%2Fcid3627650680%2Fth&Iid=sid263%2Fcid977679593%2Fth&Iid=sid262%2Fcid3752366348%2Fth&Iid=sid258%2Fcid590798761%2Fth&Iid=sid257%2Fcid898213461%2Fth HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 30512be9-1944-4c22-9cae-f4e8303e5136
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 24343
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "61150084"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 30512be9-1944-4c22-9cae-f4e8303e5136
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 0eae95c3-12c2-42b4-9849-e6807fa078e5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: CD2C93E535DA4830A7C2F63F08ADE548 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods//getitems.ashx
200 OK 22 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods//getitems.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash ffa04d62769666608a4947bb9de6f2a5
1cdd322e8c1286bd210dc6a02aa4050f789ed372
b0ab262ec1dee45deb8aaa280917fd2cf2c7c44ac6a6632e91e0934b8e040918
POST /pods//getitems.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
callercorrelationid: 20fe415d-7616-455e-9d86-891e6c52b71c
callid: empty
client: Unified App
hostname: OneDriveWOPI
isbootrequest: true
priorityhint:
requestinfo: {"ActionType":"init","CorrelationId":"20fe415d-7616-455e-9d86-891e6c52b71c"}
x-correlationid: 20fe415d-7616-455e-9d86-891e6c52b71c
x-ms-client-request-id: ActionType=init;CorrelationId=20fe415d-7616-455e-9d86-891e6c52b71c;
x-ms-client-timeout: 70000
x-ms-date: 2024-04-25T04:00:15.272Z
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-waccluster: PNL1
x-wacnoauth: 1
Content-Type: text/plain;charset=UTF-8
Content-Length: 1477
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: multipart/mixed; boundary=978bbef6ceb04246bec32ec6fddbcafc
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 20fe415d-7616-455e-9d86-891e6c52b71c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 1ae49221-7e60-4e9e-a7de-56dd8a2b8064
x-ms-client-request-id: ActionType=init;CorrelationId=20fe415d-7616-455e-9d86-891e6c52b71c;
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D6CF
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 54D06F3EDC5644848AFBD8F3A52D5DE3 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:15Z
date: Thu, 25 Apr 2024 04:00:15 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=587dbe70-c399-4e96-b267-776f50336f12
200 OK 4.7 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=587dbe70-c399-4e96-b267-776f50336f12
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9ac87d67f886d4f84bfb3818cd826ca3
3821151e7edf89d2597972960e9c6db1ab0bd48d
03b7f5693270aa276d5163a424d2c709164cb6d8cd2dd33dde98ccde768993e9
POST /pods/PowerPoint.ashx?action=587dbe70-c399-4e96-b267-776f50336f12 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-CorrelationId: 3b8bd9e7-4053-4232-b6cb-6e1992a31f08
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 4737
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3b8bd9e7-4053-4232-b6cb-6e1992a31f08
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ea92518e-f7e1-4ab0-b8d9-9f14432bab7e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest
x-msedge-ref: Ref A: E81768EC718A4853BBA0482539C3C5A7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 559c65bf-d662-4ae6-a814-6dfaad9851ee
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:16 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 9288447d-b113-4b03-8c1d-3fd8417ee18f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:16 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.plus.js
47 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (42919)
Hash d8153fbc27e90b6b135f4e052387c0a3
5fd83ab87c1bbc01e5eb9d3f2756f4514e98df89
2cabf7f8ac4b1f1a8309a72b060939fd95fee987a3304c1cf505d62cd1deb87a
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47298
last-modified: Sun, 07 Apr 2024 22:33:56 GMT
x-ms-request-id: fead76ca-001e-0023-3022-8a6554000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:16 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370707246,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017616.16188b2e&TotalRTCDNTime=2&CompressionType=br&FileSize=47298"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
0 B URL collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE2
x-userhostaddress: 91.90.42.0
x-correlationid: 4e6f77e4-4bf7-49ca-bf80-374a77af0bf9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-officefe: AM1PEPF00025BE2
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
access-control-allow-headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-xhr
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 79B2E88103094759A354E9BC0AC4F4DF Ref B: SVG20EDGE0214 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b24aa031-e630-4200-8747-da4b06c6a5e0
x-usersessionid: b24aa031-e630-4200-8747-da4b06c6a5e0
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: df6edf28-820e-4b61-86c4-297c808aef3b
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 597FB1CE63724AF48E90E0C27D0E1169 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 5852
content-type: image/png
expires: -1
etag: undefinede1ea81ef-6ea9-4b30-a312-76463cd780eb.png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 38080364-5249-424f-810b-49eab2af9551
x-usersessionid: 38080364-5249-424f-810b-49eab2af9551
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ed1bc82e-1c3a-4a50-b632-a17e8bd70354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 7B7F54E2C9A64E138BBBFB6320B75901 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 13fba29d-8ada-48b8-97af-2749f83b9589
x-usersessionid: 13fba29d-8ada-48b8-97af-2749f83b9589
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: bea1a660-4a9f-41c5-94d0-938a9c5bc1bc
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0C5702EACD9C4AEDA2EBF0A4F7DB4F4F Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3cfcd8d3-23c8-474a-9d10-412d9b194bde
x-usersessionid: 3cfcd8d3-23c8-474a-9d10-412d9b194bde
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: de1ca5f9-3f32-4485-8ef2-eb5a82577de9
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 91A30FA6EF01414AB801FA1106F16FBE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c6bb04ec-8e1b-40df-ad39-c80f4d5216b9
x-usersessionid: c6bb04ec-8e1b-40df-ad39-c80f4d5216b9
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 986ecd4c-f441-4d7a-9994-b1a8b5c397a3
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0511FEC5C6B741319D25A1C1A4C27591 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js
8.0 kB URL res-1.cdn.office.net/officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /officeonline/pods/s/h18CAA484F7E8547F_PptScripts/ppteditDS.chronosslim.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 145954
last-modified: Thu, 11 Apr 2024 04:44:53 GMT
x-ms-request-id: 54521a9c-b01e-0044-6815-8f75a8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370701176,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017615.16187378&TotalRTCDNTime=2&CompressionType=br&FileSize=145954"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 10cf5bdb-1de2-4be8-8b0d-52aa8e66c7b3
x-usersessionid: 10cf5bdb-1de2-4be8-8b0d-52aa8e66c7b3
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 541698df-c79f-4aba-8d9c-bb5b74656dd9
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 67908381E98B4656A0BEEC9DF49B8CB1 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 45adedb7-6973-43e5-8fce-c7e84d5f5eba
x-usersessionid: 45adedb7-6973-43e5-8fce-c7e84d5f5eba
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 020f8ae9-eeb2-4a59-a1b1-a4762305791a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0DF1A43674464EC8AADD0AE4D12B1207 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9dcee7fe-4630-47de-ad60-76d0e9e5c420
x-usersessionid: 9dcee7fe-4630-47de-ad60-76d0e9e5c420
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 6ea85f71-e4e8-4f4a-8bf9-41869210f796
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 028F2AD5B68B421C947D3763C9720C14 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5a4f701e-85e1-44eb-9490-daf469365ccd
x-usersessionid: 5a4f701e-85e1-44eb-9490-daf469365ccd
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D694
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 6b37ec88-5c73-4039-bf1c-399414644b35
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D694
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: C5876F15448B4D448D3004033D3ADA58 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ed5e5000-cdbf-4e5e-8db8-87e55923ec37
x-usersessionid: ed5e5000-cdbf-4e5e-8db8-87e55923ec37
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: c40c5566-8e61-4633-8df5-9b8514e16740
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 99C4B85B33C046488DDCA8DCD339F316 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=10548fc7-8509-491d-ade1-d002a91653da
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=10548fc7-8509-491d-ade1-d002a91653da
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=10548fc7-8509-491d-ade1-d002a91653da HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: bc25dae4-3353-42fa-bc78-6052e2a6ff76
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bc25dae4-3353-42fa-bc78-6052e2a6ff76
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 8fa019b3-4264-418b-aed2-b282b1a0c070
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2E6134C2E66A4CCC9CAD22427EC76F49 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hC30B9F9F3296682F_PptScripts/websocketcompressionhelper.min.js
200 OK 13 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hC30B9F9F3296682F_PptScripts/websocketcompressionhelper.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (46436)
Hash c94c43328a80d7a8d1171bbc0b0f5992
1032abb53bac81c1fae2416434dbdf4a09294567
c30b9f9f3296682f9d96b4317c4fd2e5cc5d98c6dc23b14539e82f5a981245e8
GET /officeonline/pods/s/hC30B9F9F3296682F_PptScripts/websocketcompressionhelper.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12843
last-modified: Fri, 19 Apr 2024 10:52:15 GMT
x-ms-request-id: abb7744f-901e-006c-4857-921400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370707845,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017617.16188d85&TotalRTCDNTime=2&CompressionType=br&FileSize=12843"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=PowerPointOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
294 B URL ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=PowerPointOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 65dcc2cce4945b73b2bd93c9d0819663
3b8a37259bd31564d6466e16bfd33180844add03
378f7f985220324dec6191428438fa0e0a1a96971b784601cbe7c781f3aea32b
GET /config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=PowerPointOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 294
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 05:00:17 GMT
etag: "8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=OneShell&DestinationEndpoint=Edge-Prod-OSL30r4B&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://powerpoint.officeapps.live.com
timing-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B12889E545F74814B92DBD3A3B9A2E08 Ref B: OSL30EDGE0106 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: e6985245-d7e2-4113-973f-8923fd145008
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53684
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e6985245-d7e2-4113-973f-8923fd145008
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 01de4e01-4192-4993-bf73-3f06610b6919
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: c3df8c01-1b9f-4871-8911-72a8ccf1271b
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 7703
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: c3df8c01-1b9f-4871-8911-72a8ccf1271b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 2e5aada5-ddd2-4d86-bd71-2f4a09d4bd02
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js
200 OK 105 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (605)
Size 105 kB (105337 bytes)
Hash b1a472523410fe05a023f31a8ce637d4
68ac512f29ed52330164bb6510ef39f172bd691e
8d690de7bfcdaed8acc98b3e9cb01422cf98c29aaf6760258b3b647119cab1ab
GET /officeonline/pods/s/h8D690DE7BFCDAED8_PptScripts/ppteditDS.chronos1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 105337
last-modified: Thu, 11 Apr 2024 04:44:41 GMT
x-ms-request-id: c1d3d4fb-d01e-0042-6615-8f4617000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370708232,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017617.16188f08&TotalRTCDNTime=2&CompressionType=br&FileSize=105337"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.otellogging.js
33 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 89a218ddab054ddc4c43d08ecc0a2d25
2bb4f01c5cd8dae82afccc5a9f5ce35c0f94927f
bd8c3e57a02276353eba9fed640873f0fdb73ab6d582c4b732a53c5f44cc26cf
GET /officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32790
last-modified: Sun, 07 Apr 2024 22:34:14 GMT
x-ms-request-id: c676bfb8-301e-005a-3222-8a9970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370708513,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017617.16189021&TotalRTCDNTime=2&CompressionType=br&FileSize=32790"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.mast.js
39 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.mast.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 0e90fdee574d409a29afaaec5dd66ef5
74555bb3aafaef1197f11f667fb5e1695ecb64a1
b622386f9e168e4a2792860704dfee9f91792d1bd6b5cc73308f0e2499a7fbc3
GET /officeonline/pods/s/161760740507_PptScripts/suiteux-shell/js/suiteux.shell.mast.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39359
last-modified: Sun, 07 Apr 2024 22:34:04 GMT
x-ms-request-id: 6b062ef8-901e-000e-7934-8ad627000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370708515,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017617.16189023&TotalRTCDNTime=2&CompressionType=br&FileSize=39359"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: db13d87e-9ef4-4f2f-b439-f52acb201864
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods//getitems.ashx
200 OK 43 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods//getitems.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash f9863c49e95f7d6fcf2bbb402a7eda45
68920093de6f1d494c796effc0c4744ab63328fd
2b9c1109bdb4172c3f55881599119aeb608ea02a17d297ee374551ef4f4adaf8
POST /pods//getitems.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
callercorrelationid: 6f45c9fe-b5da-44dc-acd2-835aabc1df40
callid: empty
client: Unified App
hostname: OneDriveWOPI
isbootrequest:
priorityhint:
requestinfo: {"ActionType":"prefetch","CorrelationId":"6f45c9fe-b5da-44dc-acd2-835aabc1df40"}
x-correlationid: 6f45c9fe-b5da-44dc-acd2-835aabc1df40
x-ms-client-request-id: ActionType=prefetch;CorrelationId=6f45c9fe-b5da-44dc-acd2-835aabc1df40;
x-ms-client-timeout: 70000
x-ms-date: 2024-04-25T04:00:16.699Z
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-waccluster: PNL1
x-wacnoauth: 1
Content-Type: text/plain;charset=UTF-8
Content-Length: 1181
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: multipart/mixed; boundary=5c0f8c665454487985ad46c6ef4fe001
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6f45c9fe-b5da-44dc-acd2-835aabc1df40
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: c6196d0c-7585-4fed-a5c5-ba88af89ef78
x-ms-client-request-id: ActionType=prefetch;CorrelationId=6f45c9fe-b5da-44dc-acd2-835aabc1df40;
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D6E5
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: AC55389D51C5482398C6D18955D7B7EC Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 2.5 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 78aa7aae71b60eb4655fbf1c8de86149
3203251a7e128ee9072cb4e3ca52f890878378a2
a71d2291a0e208e2063680edf6572ea67fdb808a496f62b688f20eb4fb9af333
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 2e3da772-76e2-477b-9745-378db6db8a0e
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 140
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2512
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2e3da772-76e2-477b-9745-378db6db8a0e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 71fd23a1-138c-4175-9c3e-793793df4456
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F6CF95105C594999BE06EEF24CC752FF Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: ff28011f-2edc-4b55-affc-2ffc7a299856
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 56308
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ff28011f-2edc-4b55-affc-2ffc7a299856
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 948f295c-0954-4e28-9fec-a306acb55d0e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 094872aa-ef58-4ac9-b57e-233aba677aad
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 60465
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 094872aa-ef58-4ac9-b57e-233aba677aad
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: b8e2a9a0-6e2c-46c2-989a-8953c7107286
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: efc6871c-0ffa-4d6d-aa74-41b12f964f89
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 8017
content-type: image/png
expires: -1
etag: undefined553d620c-c55d-4965-8884-710afdc52ec7.png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 3ea28568-7664-44c4-a085-57f38bec157a
x-usersessionid: 3ea28568-7664-44c4-a085-57f38bec157a
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 799455ae-a655-4d2d-a942-75e88cd00022
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 8145F52105864D6B88AF39A73B4D9B7D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e6e5f995-170f-4a22-85f9-d0c33e954940
x-usersessionid: e6e5f995-170f-4a22-85f9-d0c33e954940
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: b7874339-2401-4765-82bd-976afb66a854
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest
x-msedge-ref: Ref A: 0602F3D713444807B75DA85EE9148FE5 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ce740904-6c41-461b-9625-e1b6e88e8e96
x-usersessionid: ce740904-6c41-461b-9625-e1b6e88e8e96
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 6f623041-3a86-4676-b76d-50ce3058e17d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E5A1440C353C4770AA33F265E70649EE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d1efe210-dbe1-4b50-a60a-c2cd2af7333b
x-usersessionid: d1efe210-dbe1-4b50-a60a-c2cd2af7333b
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3e74c96a-90e2-4fc3-b669-03772e0ac25d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 428AAC3833B742DAA2739CBE14B227FE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 1eaca563-c19f-45cc-8db1-666dbb3d546d
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 30268
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 1eaca563-c19f-45cc-8db1-666dbb3d546d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: b0edb91d-d9b1-4ad6-a4eb-841bd122763d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c7cec996-0bc8-442b-b59a-0931b922188e
x-usersessionid: c7cec996-0bc8-442b-b59a-0931b922188e
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 7f001a57-f1b0-485c-8d6a-7adecbad4ffc
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 7D8142D528294A5FB072C67F461A2BA3 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bce0f7f2-02d1-4e20-8597-19024ff84600
x-usersessionid: bce0f7f2-02d1-4e20-8597-19024ff84600
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3299f55a-da15-49e8-9fcf-7d151fbf7a1e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 284D2D2ED9B94D3E8641039B52A22839 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 65c55821-72fd-4d54-a826-f4903226f2d6
x-usersessionid: 65c55821-72fd-4d54-a826-f4903226f2d6
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 5b9e0507-f0fb-486f-a677-ee166330ab33
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: CCA682AEB0FD4DE59446A833AF595894 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714017617287
0 B URL storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714017617287
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714017617287 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714017617&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: AM2PPF0F56DBB09
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: /wGZXOwgxkel1KGYSup5Fg.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 4212.9205
X-ClientErrorCode: PassportAuthFail
X-ErrorCodeChain: Unauthenticated
X-AsmVersion: UNKNOWN; 19.1381.322.2019
Date: Thu, 25 Apr 2024 04:00:17 GMT
Connection: close
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2a2c76f8-4812-45eb-935a-aad4ba66a661
x-usersessionid: 2a2c76f8-4812-45eb-935a-aad4ba66a661
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 4c53b7fb-a86d-429d-afd5-9ff398902834
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 691ECD32B70F4DB093855E1ED9AE027D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8b7233d0-828c-49c6-9e48-0639673d6e32
x-usersessionid: 8b7233d0-828c-49c6-9e48-0639673d6e32
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 732de132-0832-40fb-9561-64a9e84be51e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_visioslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: FDD42FD16E764389B7D89C2619CFD5A2 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d4f37194-fd38-4a5f-87a2-4d8838a04b31
x-usersessionid: d4f37194-fd38-4a5f-87a2-4d8838a04b31
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D694
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 20ffc9ef-7fe7-47b0-a0da-901939a79852
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D694
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: FD61270F5A674C7D960CB29630D5A922 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ac37a8b1-39fa-4334-ba97-f484dd4e8055
x-usersessionid: ac37a8b1-39fa-4334-ba97-f484dd4e8055
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 55573756-e885-4e62-8154-f62e36799e83
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: DDE59B9C56C2443D905F40916B7526E4 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3a3b785b-fd41-44e1-a971-56be0d8cec62&waccluster=PNL1&Iid=sid258%2Fcid590798761%2Fsldw960%2Fsldh540%2Fver21%2Fsl
200 OK 479 B URL GET HTTP/2 powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3a3b785b-fd41-44e1-a971-56be0d8cec62&waccluster=PNL1&Iid=sid258%2Fcid590798761%2Fsldw960%2Fsldh540%2Fver21%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b6697ee7ffe0e0727e151ec76c696bd7
ff34e9359b7db3b0b38152abb27034e5a05814c7
87b9352ba82fdf8dd5cda29e60cd9a7748c86cfcfca875489f830b39110a4d3a
GET /pods/images.ashx?si=undefined&action=3a3b785b-fd41-44e1-a971-56be0d8cec62&waccluster=PNL1&Iid=sid258%2Fcid590798761%2Fsldw960%2Fsldh540%2Fver21%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 7a0595f7-e890-43c8-a239-70d79aa8c116
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache
pragma: no-cache
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "41876830"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 7a0595f7-e890-43c8-a239-70d79aa8c116
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 2a1c3cc9-2f8d-4cbb-a672-0b9798926e23
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_excelslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 62A4F86787424F2996CB1336FFA98F52 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=973ebc48-ba6f-4f8b-84d5-e0956335154c
932 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=973ebc48-ba6f-4f8b-84d5-e0956335154c
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash aef700a8a81042ed00abef728095a791
177ad4b250de3f2e2d43df6afc1088b2be8ea5c5
ea18c6f0c79ee911181346a3c9deaec4d8ffa5c7da5ac0d35e770720a74463ac
POST /pods/PowerPoint.ashx?action=973ebc48-ba6f-4f8b-84d5-e0956335154c HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 0e95e391-c30d-4a75-b162-782ac4bc7062
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 932
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0e95e391-c30d-4a75-b162-782ac4bc7062
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 39dea689-2d7f-4057-8aa2-8ff48ebd8351
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 73ACD87FE8A34CBD96BA1D80F491FBFB Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8
0 B URL puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=8 HTTP/1.1
Host: puk1-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://powerpoint.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YTyFnMVR68uCZauP/55i5A==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PUK1
X-FrontEnd: RtcNetCoreLB1
X-MachineName: LN2PEPF000108AF
X-UserHostAddress: 91.90.42.0
X-CorrelationId: 3dcce4cd-c541-481c-9cbc-e788d5ee1ffe
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeFE: LN2PEPF000108AF
X-OfficeVersion: 16.0.17609.41019
X-OfficeCluster: PUK1
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://powerpoint.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
Sec-WebSocket-Accept: raOXAB8Ftoyi7RBxOQAm7i/b+fo=
Connection: Upgrade
Date: Thu, 25 Apr 2024 04:00:17 GMT
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 46745
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 04e0172f-7003-49ea-8444-5bd7dd9c5e0d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: a2de3a25-2803-49d6-9ab9-08a752d7ddc1
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 276C05BF957B4C43BDAB9EE7A8CC307C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:17Z
date: Thu, 25 Apr 2024 04:00:17 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=383c8510-9c16-4946-bc46-95e58d64752b
303 B URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=383c8510-9c16-4946-bc46-95e58d64752b
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash bab8ce2eadf6aef155b279056692c0fa
c97e5b7d476d2242afe6736c63391717f0471f04
b5080c47ed07b0ded44b156cc46ce1b93a26d07d373f8bb9433dcfcbb2eeb035
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=383c8510-9c16-4946-bc46-95e58d64752b HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: 77468102-497d-4b78-abf4-9b30fb739e91
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-LastPodRCLocation: AM4PEPF0002D704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1568
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 303
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 77468102-497d-4b78-abf4-9b30fb739e91
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 5362250e-5334-490d-b7a1-5ccc6ce0641f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 92838C0CA51146FE99AE99F3842ED3B8 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=033b18d3-5604-4944-942b-98181f83e848
200 OK 129 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=033b18d3-5604-4944-942b-98181f83e848
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=033b18d3-5604-4944-942b-98181f83e848 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: b63d22f8-6f13-4508-9b7b-01192fb1b984
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b63d22f8-6f13-4508-9b7b-01192fb1b984
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 0dd1d490-f9fa-4316-8f4a-12d83b70014a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7BA9B3ACC6F844D6BE31F5B2229B6F51 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hE459E1823383F26F_PptScripts/wp5/immersiveReader.min.js
6.9 kB URL res-1.cdn.office.net/officeonline/pods/s/hE459E1823383F26F_PptScripts/wp5/immersiveReader.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (30457)
Hash 794e160546ebb975541b2d39bdb8316d
8d55b94a28dedaec01209e4237951a243b2dd33e
e459e1823383f26fb5f534745a505eb10850cf918a78aec2891327f0ca77e5a8
GET /officeonline/pods/s/hE459E1823383F26F_PptScripts/wp5/immersiveReader.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6893
last-modified: Thu, 18 Apr 2024 16:15:23 GMT
x-ms-request-id: 23763492-401e-0050-7763-933dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370711615,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.16189c3f&TotalRTCDNTime=2&CompressionType=br&FileSize=6893"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-. HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
WaitForSessionTimeoutMs: 0
X-CorrelationID: d365e560-4fe6-4446-b5d1-aeb57ebb5f2c, 666ccfd6-7513-4a54-915e-5863dbec69f8
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 395
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5070d616-e0ec-4243-8743-fd97b433ad09
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 17af7ad1-e5dd-4570-82c3-12ecab1b18fd
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
lastpodeditcompleteutc: 01/01/001 00:00:00.000
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: C6C365D63E7F46FDAC6A63A30070206B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 786
last-modified: Sun, 07 Apr 2024 22:33:49 GMT
x-ms-request-id: d97a6f41-a01e-002a-7922-8a2087000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370711932,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.16189d7c&TotalRTCDNTime=2&CompressionType=br&FileSize=786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/officebrowserfeedback.css
2.9 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (20551), with no line terminators
Hash 3d6ca9b0358bef8348220f958f049b61
8b85c3925fbc3d51e57658845a80c67f2101cc26
8d7b8c265df55db9c4be132ca6fe1ceebb0cfe89aa47992738cab92285c3afad
GET /officeonline/pods/s/161760740507_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2880
content-type: text/css
last-modified: Sun, 07 Apr 2024 22:33:20 GMT
x-ms-request-id: c950c367-e01e-0066-1935-8ab0b7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370711931,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.16189d7b&TotalRTCDNTime=3&CompressionType=br&FileSize=2880"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 75f58ef9-b2db-4038-807d-d9063998fccb
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613379
11 kB URL puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613379
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type New Line Delimited JSON text data
Hash ae401d1fd9795297e6e592c3fda32b32
b8ca45ae8de9419892ee5776e5e8412b412aff7c
c3829d3a10605914b93c0cd024f98c9319ea16e36355d49b8a05b39794594bd5
GET /rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613379 HTTP/1.1
Host: puk1-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PUK1
x-frontend: RtcNetCoreLB1
x-machinename: LN2PEPF00010873
x-userhostaddress: 91.90.42.0
x-correlationid: 3dcce4cd-c541-481c-9cbc-e788d5ee1ffe
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-officefe: LN2PEPF00010873
x-officeversion: 16.0.17609.41019
x-officecluster: PUK1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: LN2PEPF00010873
rtcsessionid: f28d16e0-fdcd-4415-b153-0a3bd2fb28c1
x-officertcproxy: LN2PEPF00010851
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=PowerPoint&version=16.0.17615.40511&language=en-US
2.5 kB URL ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=PowerPoint&version=16.0.17615.40511&language=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 355ef98d81c059cf936e37a45d983283
6e16a0b87fbc0cb1626cb3de8f9d28205956267d
5149777ad50e54fddea5102afcba3441aab5e0f9dd8aa740defb36723f671860
GET /config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=PowerPoint&version=16.0.17615.40511&language=en-US HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 2500
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 05:00:18 GMT
etag: "GsjQYo3Ij4eUP7KJFGIM0rb078yAzILe7TacuGbC9pk="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=CHILL&DestinationEndpoint=Edge-Prod-OSL30r4B&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://powerpoint.officeapps.live.com
timing-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B0EA90C10FDE4D51A01456C3411DA4D6 Ref B: OSL30EDGE0106 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: c45ea32f-c7dd-4765-a6d7-0f632090544f
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 54523
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: c45ea32f-c7dd-4765-a6d7-0f632090544f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 81aac903-3c75-4e44-a325-11a5d5834aa5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js
200 OK 9.8 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (42379)
Hash 159117e3168226c70af093c137f756f4
30ff4a7fdc81a16c82c987aba82aa2ddac886044
8f36e575dc60ec7273e8e80f8705edc944fc9036accb238e9dcd09bd27110abf
GET /officeonline/pods/s/h8F36E575DC60EC72_PptScripts/wp5/floatingContainerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9842
last-modified: Thu, 11 Apr 2024 04:55:42 GMT
x-ms-request-id: a77fa5d9-701e-0016-6de3-8f0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370713072,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a1f0&TotalRTCDNTime=2&CompressionType=br&FileSize=9842"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h24BADA8EE5DDC747_PptScripts/1033/comment-pane-strings.min.js
200 OK 2.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h24BADA8EE5DDC747_PptScripts/1033/comment-pane-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (10543), with no line terminators
Hash d4e64835d59be3b4abf3ee7ad4d7d1dc
bba289bfe7c4d1e82fdc3ab1093ed579b2219b6e
24bada8ee5ddc747d0f1297a13f3ec53ecea5aa03e48749329c0f9b0e28e9d09
GET /officeonline/pods/s/h24BADA8EE5DDC747_PptScripts/1033/comment-pane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2489
last-modified: Sat, 20 Apr 2024 07:22:27 GMT
x-ms-request-id: e393b655-d01e-0042-59f3-924617000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370713092,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a204&TotalRTCDNTime=2&CompressionType=br&FileSize=2489"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js
230 kB URL res-1.cdn.office.net/officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (787)
Size 230 kB (229503 bytes)
Hash ad7fc93cea47019bc95049b990dced73
5f72ab41d6e830fe4f5c4b15541a886c35c66042
2279368212b65fabe84e56a9c67178e498c09ee9cf0081c70f81acc6ffac47b7
GET /officeonline/pods/s/h2279368212B65FAB_PptScripts/ppteditDS.chronos2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 229503
last-modified: Thu, 11 Apr 2024 04:45:47 GMT
x-ms-request-id: d8a029bb-d01e-000f-1a26-8f89fb000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370713097,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a209&TotalRTCDNTime=2&CompressionType=br&FileSize=229503"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings
0 B URL powerpoint.officeapps.live.com/pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pops/RoamingServiceHandler.ashx?action=getPowerPointOnlineUserSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&requestedSettings=ProofingSettingLanguageList;ProofingSettings HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: 6557439f-2ba0-493c-a3b9-5c47904c335f
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6557439f-2ba0-493c-a3b9-5c47904c335f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D738
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D738
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: ED293B88971A4A9F941F081420279EF0 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=33ca346c-eada-400d-a6db-e9db7a7d64b8
141 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=33ca346c-eada-400d-a6db-e9db7a7d64b8
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b1244e784d236242ebc47883a1d5c0e7
4fcdc4d840acc8c99a30e1149ded500a801896b7
cd3f58e9647e4cd2f2e785f37c4c66b23a71c859c24af1c8fdfada057e0dc9a1
POST /pods/PowerPoint.ashx?action=33ca346c-eada-400d-a6db-e9db7a7d64b8 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 626fef04-b638-4997-a2db-1b11a5c861b7
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 3057
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 141
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 626fef04-b638-4997-a2db-1b11a5c861b7
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 4aea9cc6-2819-4045-9d12-491703d0fa0a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 75B051230D074CBBA38785D5996AB7AC Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hC59939DA5272036D_PptScripts/PowerPointSimplified.Wac.TellMeSuggestionModel.js
67 kB URL res-1.cdn.office.net/officeonline/pods/s/hC59939DA5272036D_PptScripts/PowerPointSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (58769), with CRLF line terminators
Hash 2c137b976b1627ebc9ff6ef1adb4c9ba
60ddb7408aeb58c0b2e188c30553aa19e3ccf742
c59939da5272036d185bcf413ff9c6e31e6aa28eca448f984f0da84e028b7595
GET /officeonline/pods/s/hC59939DA5272036D_PptScripts/PowerPointSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 67419
last-modified: Mon, 08 Apr 2024 12:29:10 GMT
x-ms-request-id: 2933b283-901e-0031-3322-8a1e84000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370713381,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a325&TotalRTCDNTime=2&CompressionType=br&FileSize=67419"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 143 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d5c27dfaa8fef3acc33e469ccc2b125a
038843bf308948955ec1d87698dab8827ba7ba0e
b07601878ada73fafaaab2a237454f4e53e41670fd1d24bf3adab1e4fa749798
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: d90e2849-58d8-4cab-8efb-4784cd5f7946
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 516
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 143
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d90e2849-58d8-4cab-8efb-4784cd5f7946
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: c38ec4b9-de31-4ac2-a5e2-679b4bef83a2
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 508556D34F944F4880138A74B90A3CEC Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/p/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&sl=1&u=1
139 B URL powerpoint.officeapps.live.com/p/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&sl=1&u=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 6cce626811c106b0ff663f0240596fc7
a867e36a72aeddec42ca18eb3a6e52ec1c13c2b0
616447731eaa480f4ee24154d441d1eb203a3d71361492531d64f53064e920ae
POST /p/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&sl=1&u=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: 1f767216-44e0-484f-9e48-2d32418d5d04
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 0
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 139
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1f767216-44e0-484f-9e48-2d32418d5d04
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67D
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D67D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E4EFF86D226346ABA50BBA089AA932C0 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config
200 OK 1.3 kB URL POST HTTP/2 powerpoint.officeapps.live.com/p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4214f535a29274f17e1c41e53c83b0f2
604319289d29f0fd3343a10660ec05388a098c2b
9a5f66dadb0b88fcbdf6233f92ccad8eb89824104be5a42173a0840d9ee1c74e
POST /p/proofing.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063&apitype=Config HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-StatelessPopsAffinityRoutingEnabled: false
X-CorrelationId: 9bedae0c-9bc8-4b3e-9a51-6a6dc4fa099e
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
Content-Length: 261
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1324
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9bedae0c-9bc8-4b3e-9a51-6a6dc4fa099e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67A
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D67A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 29F5111E45F544309487506B92635AAB Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: a9f5e73c-1795-4134-8495-037d56ee59c4
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 25828
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: a9f5e73c-1795-4134-8495-037d56ee59c4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: e2a768df-6952-4f80-8cd2-a59dae4bfa2b
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js
200 OK 102 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (101466 bytes)
Hash d02ffe0f86ffe7997c4af23e821f151a
6d26a7652fdbbe1a480159d10c5a62fa33a9958b
08087c8e672c967b93be8d05f08c4c14eef8bbf9ddc35d6e8f3d8580e7bb8e5d
GET /officeonline/pods/s/h08087C8E672C967B_PptScripts/wp5/sharedComments.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 101466
last-modified: Thu, 11 Apr 2024 04:49:29 GMT
x-ms-request-id: b34b9b9e-701e-004b-4323-8f03c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370714511,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a78f&TotalRTCDNTime=2&CompressionType=br&FileSize=101466"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js
96 kB URL res-1.cdn.office.net/officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (751)
Hash a02f72b86fab5256d0f1b6e9400d7e55
9f81df1a05dd9c232534d32eac68f89abeb511a6
76e51ee4326553e9829e3890f5d3a0f2def15f2502b076d37576de9df68e0318
GET /officeonline/pods/s/h76E51EE4326553E9_PptScripts/ppteditDS.appforoffice.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 95794
last-modified: Thu, 11 Apr 2024 04:45:10 GMT
x-ms-request-id: edb24d6c-301e-004a-1326-8f5c18000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370714747,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a87b&TotalRTCDNTime=2&CompressionType=br&FileSize=95794"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=85587f26-421d-47cf-bd73-784c728f114b
4.5 kB URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=85587f26-421d-47cf-bd73-784c728f114b
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c9b566fc292dc3442063e9bc9a8a5b5e
84036dc05b38f1830c0a1336a5c4985f6928c280
540309bfe9232dd9f1e803879fba96f4dca3b182db44dfe06419daf529e10938
POST /pods/PowerPoint.ashx?action=85587f26-421d-47cf-bd73-784c728f114b HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 1234a8de-7231-4351-a874-b4a0c23b4664
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 153
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 4471
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1234a8de-7231-4351-a874-b4a0c23b4664
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 95358be8-e43a-41ec-995a-fc919cffc43f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_excelslice_control,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 6BBEA8FB3CD443D198B43E5419CBB73E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=81af2338-2a0a-4c1f-8146-393628572409
302 B URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=81af2338-2a0a-4c1f-8146-393628572409
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c0665b7324b4569f53fcd9defaf4787a
25ec5f45e316b4630e583864a581010cf231ac04
28a279ac5c2fd8086738aab72e646860ed300de9c09c997e3c734c25085fedb4
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=81af2338-2a0a-4c1f-8146-393628572409 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: 854495d1-f52a-4e2b-9d99-085a80056db6
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-LastPodRCLocation: AM4PEPF0002D704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1568
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 302
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 854495d1-f52a-4e2b-9d99-085a80056db6
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 527c61e0-5778-42b6-ae0e-591c719ae296
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 45921D18FF2142BFA2D9C477F41F569C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h66C70312DE6CA4E1_PptScripts/otel.worker.min.js
200 OK 31 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h66C70312DE6CA4E1_PptScripts/otel.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 2f1d74149f052d3354358e9856375219
8019f7a2ea824930f91c3ec375d926b650fb1cff
66c70312de6ca4e1d7ef1e858307764c241a80e7411cee686ea2fc2d74152749
GET /officeonline/pods/s/h66C70312DE6CA4E1_PptScripts/otel.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://powerpoint.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31172
last-modified: Sat, 20 Apr 2024 23:22:26 GMT
x-ms-request-id: f7bc0408-e01e-0014-807d-93b7f8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:18 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370715019,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017618.1618a98b&TotalRTCDNTime=3&CompressionType=br&FileSize=31172"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
admin.microsoft.com/admin/api/uxversion?bldVer=v1
0 B URL admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ms-mac-hostingapp,x-ms-mac-locale
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=12338479-7bc5-4afc-b5e2-1b914d115e95; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=12338479-7bc5-4afc-b5e2-1b914d115e95; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6EF0473E1B1B4BA18791F26D772CB91F Ref B: SVG20EDGE0407 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:18 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h2DB61DE2F30F2B22_PptScripts/1033/PowerPointSimplified.Wac.NBCommandModel.js
42 kB URL res-1.cdn.office.net/officeonline/pods/s/h2DB61DE2F30F2B22_PptScripts/1033/PowerPointSimplified.Wac.NBCommandModel.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (27906), with CRLF line terminators
Hash 50c2c66694c05ed80355bc749623e620
324902133aef623087e60540d0993e54d151845f
2db61de2f30f2b22543cea26544dc351782a6758a5c03fdb43d2dd99108643c5
GET /officeonline/pods/s/h2DB61DE2F30F2B22_PptScripts/1033/PowerPointSimplified.Wac.NBCommandModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 42294
last-modified: Mon, 08 Apr 2024 12:30:32 GMT
x-ms-request-id: 12a2feff-701e-004b-0639-8a03c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370715879,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618ace7&TotalRTCDNTime=2&CompressionType=br&FileSize=42294"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
admin.microsoft.com/admin/api/uxversion?bldVer=v1
2.3 kB URL admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash fa25a88145828e4f344426503714be3a
f3dcc3d9e57a34101faf0d033890a72793ded5e9
fb2dc73bcf46a340b1305eb2e6ed550f2f0f0c61e7f66327d1eb06b068934aaa
GET /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
x-ms-mac-locale: en
x-ms-mac-hostingapp: wac-2157-floodgate-sdk
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2257
content-type: application/json; charset=utf-8
expires: -1
set-cookie: s.SessID=79604a1e-5ce9-49ac-8444-d31cd2f8a574; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=79604a1e-5ce9-49ac-8444-d31cd2f8a574; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 762bb7d5-f6e3-4e2a-b1f5-4074ca678cf8
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BE8E5DCA525048E5A9EAB13F216F42FE Ref B: SVG20EDGE0407 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js
111 kB URL res-1.cdn.office.net/officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (110652 bytes)
Hash d6ac2bf65fe4d9466094063ed1408ec5
bab1a4b864e9c9e40c58fcaefaf3d2ad643f7b8f
ba8ef95970eb59831174d6d61d69cc04d7a9ad062281a7e5f7554ba28145d6ce
GET /officeonline/pods/s/hBA8EF95970EB5983_PptScripts/wp5/sharedCommentsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 110652
last-modified: Thu, 11 Apr 2024 04:55:04 GMT
x-ms-request-id: f17cc2bf-001e-001c-262c-8fadf7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370715970,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618ad42&TotalRTCDNTime=2&CompressionType=br&FileSize=110652"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2
200 OK 0 B URL GET HTTP/2 messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectmessaging.engagement.office.com
FingerprintFE:94:67:AF:44:9E:59:70:C9:89:CD:5D:20:09:E9:38:D1:DF:64:40
ValidityFri, 12 Apr 2024 00:16:39 GMT - Sat, 10 Aug 2024 00:16:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-clientsessionid,x-correlationid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 25 Apr 2024 04:00:19 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-clientsessionid,x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: 850ed2175ef9f537e79b893999ca26ef
x-servicecorrelationid: 850ed217-5ef9-f537-e79b-893999ca26ef
x-machine: OMEXNODE2000004__omexexternal-prod-weu-2-001_4
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: c03c13f2-ef2f-4369-999c-6485eb49de5a
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h3B7870DF18B55516_PptScripts/1033/office-common-strings.min.js
3.4 kB URL res-1.cdn.office.net/officeonline/pods/s/h3B7870DF18B55516_PptScripts/1033/office-common-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (20157), with no line terminators
Hash 9e6f357754acbe6eea7cad8608da0232
1794b0b61e1f173e1360a41ad6a7082f80545c92
3b7870df18b55516cc26efcb9f5a3a2bb84f327416cfd2c3411ccdf4c3fa245b
GET /officeonline/pods/s/h3B7870DF18B55516_PptScripts/1033/office-common-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3394
last-modified: Sun, 21 Apr 2024 06:00:34 GMT
x-ms-request-id: 914ff646-501e-0063-420f-94626c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370716394,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618aeea&TotalRTCDNTime=2&CompressionType=br&FileSize=3394"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h854CB6842FF848E2_PptScripts/1033/powerpoint-agenda-to-ppt-strings.min.js
200 OK 765 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h854CB6842FF848E2_PptScripts/1033/powerpoint-agenda-to-ppt-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3153), with no line terminators
Hash 257b92fd6a8dbeda7d990b77fa4cb80b
83f7d065a3660a19ba1acdb147f4adf154b1196b
854cb6842ff848e29ec647d2240c98acd73aaaaf4c6dc4936acce5bf23db952e
GET /officeonline/pods/s/h854CB6842FF848E2_PptScripts/1033/powerpoint-agenda-to-ppt-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 765
last-modified: Sun, 21 Apr 2024 17:24:32 GMT
x-ms-request-id: 13aa768a-f01e-0018-4c1f-9420f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370716397,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618aeed&TotalRTCDNTime=2&CompressionType=br&FileSize=765"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4791206c-32af-44cc-a15e-525cf49e86d3
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=4791206c-32af-44cc-a15e-525cf49e86d3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=4791206c-32af-44cc-a15e-525cf49e86d3 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: b0cd143a-c94c-4b2b-9b6a-efcd0ce58199
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b0cd143a-c94c-4b2b-9b6a-efcd0ce58199
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 7f269f87-5996-4855-80fe-662bcb939d25
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: 44D4B87C986B449FA753C64D21E83D2C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hB74F5FF4C9041F3B_PptScripts/wp5/addInLazy.min.js
30 kB URL res-1.cdn.office.net/officeonline/pods/s/hB74F5FF4C9041F3B_PptScripts/wp5/addInLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 79eafc3393ba301cba84998eb0eb1f47
fe0c0a07d0cce0ba6ab186363bd4865453eb8497
b74f5ff4c9041f3b4e044b3b9b422382a21c947f5a9280ae193d2282b9f62e96
GET /officeonline/pods/s/hB74F5FF4C9041F3B_PptScripts/wp5/addInLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29934
last-modified: Sun, 21 Apr 2024 06:07:28 GMT
x-ms-request-id: 05ece5c8-201e-0024-6e09-940937000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370716651,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618afeb&TotalRTCDNTime=2&CompressionType=br&FileSize=29934"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
200 OK 259 kB URL GET HTTP/3 res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12695)
Size 259 kB (258890 bytes)
Hash 574fd73194781626aca55c81f59d43f6
c83c3630eb878ca247e0c6235d674277271fec69
a7c7314646ad30c6042053cc2d4ddcf0daad63d0f4826a68c6237ef260d48c93
GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 258890
last-modified: Mon, 22 Apr 2024 19:13:12 GMT
x-ms-request-id: 52560014-401e-0050-541e-953dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370716678,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b006&TotalRTCDNTime=3&CompressionType=br&FileSize=258890"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=912ee6c5-de18-46ad-8c23-fb38b03c4362&waccluster=PNL1&Iid=sid259%2Fcid4228412110%2Fsldw960%2Fsldh540%2Fver16%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=912ee6c5-de18-46ad-8c23-fb38b03c4362&waccluster=PNL1&Iid=sid259%2Fcid4228412110%2Fsldw960%2Fsldh540%2Fver16%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 27e87597b579a401a38d39c6c2adf144
135c57a031f24fbd7a0d741565b4cd903a50e9f9
0111af15711d2a16923a277a705e249107a464058d426ecb70a874e40c06c8aa
GET /pods/images.ashx?si=undefined&action=912ee6c5-de18-46ad-8c23-fb38b03c4362&waccluster=PNL1&Iid=sid259%2Fcid4228412110%2Fsldw960%2Fsldh540%2Fver16%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 2f8a99f0-d9b0-41bb-bde5-5816ee5da495
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "24691117"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2f8a99f0-d9b0-41bb-bde5-5816ee5da495
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 85876db3-f90f-4978-89ae-76d60c7d3dff
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: EA97FD12AEE24857B737E9A181C62040 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2
200 OK 109 B URL GET HTTP/2 messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectmessaging.engagement.office.com
FingerprintFE:94:67:AF:44:9E:59:70:C9:89:CD:5D:20:09:E9:38:D1:DF:64:40
ValidityFri, 12 Apr 2024 00:16:39 GMT - Sat, 10 Aug 2024 00:16:39 GMT
Hash b22cac36842dcb642f5bff86c0ff2fb9
7f0557d5258453f55c1db5dd40ab7f1c31932655
e25abd11267b28557444d53a9a3bf52a796df20a14205fde0b19c6b8287976b3
GET /campaignmetadataaggregator?country=US&locale=en-US&app=2157&platform=Web&version=16.0.17615.40511&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight44cf%3Bfloodgateflight45cf%3Bpptfloodgateflight48%3Bpptfloodgateflight59%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
x-clientsessionid: 7b3b3846-93aa-4ff6-9c05-fcb2005d03b2
x-correlationid: 7368ac44-ef41-4403-68c9-4a39d9d25f82
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 04:00:19 GMT
content-type: text/plain; charset=utf-8
server: Microsoft-HTTPAPI/2.0
access-control-allow-origin: *
x-activitytraceid: c6457c7dfe659d78775fa46fbf2a3c07
x-servicecorrelationid: c6457c7d-fe65-9d78-775f-a46fbf2a3c07
x-machine: OMEXNODE2000003__omexexternal-prod-weu-2-001_3
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 14d63d19-1f1d-429d-a266-e242203c65c7
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/1033/osfruntime_strings.js
200 OK 2.2 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/161760740507_PptScripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (11667), with no line terminators
Hash a1d892f1368c7f3b1dfb75057b936b66
91ec4980bfa5b301199b574e6240a618247679f9
2db70125e37f651d09a6d03d593a65e09668e6267cca1257251328517f7eaefc
GET /officeonline/pods/s/161760740507_PptScripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2223
last-modified: Sun, 07 Apr 2024 22:25:07 GMT
x-ms-request-id: e1084625-f01e-0055-3d22-8aef1c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370716994,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b142&TotalRTCDNTime=2&CompressionType=br&FileSize=2223"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h1ADA4483AEA1A6B1_PptScripts/wp5/agendaConverter.min.js
11 kB URL res-1.cdn.office.net/officeonline/pods/s/h1ADA4483AEA1A6B1_PptScripts/wp5/agendaConverter.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (45891)
Hash 071807e01349d9263d9141ea78078e07
848222cc7075a4501a411ac85039d386e27dfdd5
1ada4483aea1a6b1fcf54a7bb163445341b533b48070ef8c3120d2f6dd1f3474
GET /officeonline/pods/s/h1ADA4483AEA1A6B1_PptScripts/wp5/agendaConverter.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10974
last-modified: Thu, 11 Apr 2024 04:51:31 GMT
x-ms-request-id: 34a6800c-901e-006c-5e91-8e1400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370717007,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b14f&TotalRTCDNTime=2&CompressionType=br&FileSize=10974"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/p/AddinServiceHandler.ashx?action=getUserId&app=powerPoint&corr=1cd49631-f812-8e3c-dd92-51d6bcea6264&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
1.2 kB URL powerpoint.officeapps.live.com/p/AddinServiceHandler.ashx?action=getUserId&app=powerPoint&corr=1cd49631-f812-8e3c-dd92-51d6bcea6264&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /p/AddinServiceHandler.ashx?action=getUserId&app=powerPoint&corr=1cd49631-f812-8e3c-dd92-51d6bcea6264&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-CorrelationId: 633f3d8c-08b6-48f5-aa96-707e11b182aa
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 633f3d8c-08b6-48f5-aa96-707e11b182aa
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67D
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D67D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: B6F5529CE94B4F70AC4BE28D0CAA3F8D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: application/json
x-ms-mac-hostingapp: wac-2157-floodgate-sdk
x-ms-mac-appid: 4728a857-9526-497e-86ae-91e156da11a2
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 3774
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=35fa0e61-4a32-4c88-b6be-f97f56f6a6d4; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=35fa0e61-4a32-4c88-b6be-f97f56f6a6d4; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: d41c7cd9-98de-4058-9d17-d4ee2f273e47
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7C9FE7ADD55A4AD5B18A507806FF6530 Ref B: SVG20EDGE0407 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:18 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/pptskydriveuploadhandler.ashx?cpfsi=1
139 B URL powerpoint.officeapps.live.com/pops/pptskydriveuploadhandler.ashx?cpfsi=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash f77535334e854f148576b2a87ab01f12
018e1047606fdbf3f3f364c69ca6e29cef9e3111
de8926ce4d4ff778d822f45a1f93b12da18364a2e9e6163f557079c766a1437c
GET /pops/pptskydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-CorrelationId: 5433f4ce-4c46-4b29-a3f0-5b667e887be7
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5433f4ce-4c46-4b29-a3f0-5b667e887be7
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D738
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D738
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 889B488179E94A069BF5B85411B8A467 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash ba7dad68c9f75d2bd752c837519147f8
c923ee74b1a790009fca32eec00c1f569e58934f
4fdd553c234c35ad74609105478d55d2aa5466381969f2499e45d2a251d929eb
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,b664cab4b3f24a739be75b93b026749e-65c206a3-a985-48b4-8b50-36c56c3ce309-7201,35612b11d234460da5c673d7b172fd93-f8762c6b-96cb-4e60-87fa-015aac0c2ff1-7212,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,e97859101370486fbcb67f5a023da3fc-29b89831-2d28-4841-8fa6-338080fae3a4-7206,d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360
upload-time: 1714017619374
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 37579
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 217
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/pods/s/161760740507_PptResources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1475
content-type: text/css
last-modified: Sun, 07 Apr 2024 22:20:00 GMT
x-ms-request-id: c9507cc1-e01e-0066-1b35-8ab0b7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370717933,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b4ed&TotalRTCDNTime=3&CompressionType=br&FileSize=1475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/progress.gif
644 B URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 24 x 24
Hash f2983bb5ee7ee6482736051893b0c7e6
b9ef21fb58a310e6d8b5a6dc38f7cc85e8659071
79b48a07e8b202282bd8ec6ab7aac909eaa359da349fe822fac69e1f6e2991ec
GET /officeonline/pods/s/161760740507_PptResources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 644
content-type: image/gif
last-modified: Sun, 07 Apr 2024 22:20:17 GMT
x-ms-request-id: feadeec2-001e-0023-3f22-8a6554000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370717939,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b4f3&TotalRTCDNTime=3&CompressionType=&FileSize=644"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/moe_status_icons.png
6.1 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/pods/s/161760740507_PptResources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6140
content-type: image/png
last-modified: Sun, 07 Apr 2024 22:19:24 GMT
x-ms-request-id: 9fa15a17-e01e-0049-5d22-8abd7c000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370717960,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b508&TotalRTCDNTime=3&CompressionType=&FileSize=6140"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/agavedefaulticon96x96.png
1.1 kB URL res-1.cdn.office.net/officeonline/pods/s/161760740507_PptResources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/pods/s/161760740507_PptResources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1115
content-type: image/png
last-modified: Sun, 07 Apr 2024 22:19:32 GMT
x-ms-request-id: 92ed7243-401e-001d-7722-8af22b000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718005,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b535&TotalRTCDNTime=3&CompressionType=&FileSize=1115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js
4.3 kB URL res-1.cdn.office.net/officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (18413), with no line terminators
Hash 4653986a0c1eadfece4ff24eabfb9332
46fffae9ed3ac712ccb9fa08fc5677b8da883423
41d0c85d893d8b2a2bab6b8b7b759a1a5bcec3c195857159a298f02104e0a7da
GET /officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4307
last-modified: Sun, 21 Apr 2024 17:21:51 GMT
x-ms-request-id: 8b90634e-101e-003f-2b1e-943734000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718016,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b540&TotalRTCDNTime=2&CompressionType=br&FileSize=4307"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=dbdce6c9-812a-480d-968b-ac9882ee7abf
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=dbdce6c9-812a-480d-968b-ac9882ee7abf
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=dbdce6c9-812a-480d-968b-ac9882ee7abf HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 660a071c-0e40-44e2-a78c-1ef178c28dc6
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 660a071c-0e40-44e2-a78c-1ef178c28dc6
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 95069276-e057-4f8e-a8fc-d54bbaca746d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-lastpodrclocation: AM4PEPF0002D704
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: B83EAE3619E74366BC6B4419CD515389 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: c3c96b97-8953-4091-9640-9bd6072373f8
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 9de612da-d6dc-4736-a7f4-571ee062be6a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hBFBED9811A730D95_PptScripts/wp5/rehearsalSummaryPage.min.js
126 kB URL res-1.cdn.office.net/officeonline/pods/s/hBFBED9811A730D95_PptScripts/wp5/rehearsalSummaryPage.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 126 kB (125505 bytes)
Hash 4e871f18495509a3b550d4183e01691e
366c2ff2e5c46bd8872fa18c18c9e842c36ecb40
bfbed9811a730d95672a4505f7411238b3755944c5b8d7b90f81590e22e7eaf7
GET /officeonline/pods/s/hBFBED9811A730D95_PptScripts/wp5/rehearsalSummaryPage.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 125505
last-modified: Thu, 11 Apr 2024 04:55:20 GMT
x-ms-request-id: 6963ce01-301e-0038-4f31-8f5b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718438,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b6e6&TotalRTCDNTime=2&CompressionType=br&FileSize=125505"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
1.6 kB URL collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 08c442ca83d3443d004a5cc80639fc46
f4dbce4c2e07899680b2d67ad88d1d693c252926
494b67945539c7963029d2e7bcf243c0e05c273a2cbb2e0e41d4398e500a94f9
GET /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3D4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3D1714449603063&ClientId=%7Bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7D&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-IsCoauthSession: false
X-CorrelationId: aff42150-2945-414b-9719-b581e2fe7b6f
RTC-TokenProofkey: True
RTC-IsWacJsBootFsRequest: True
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, max-age=31535999
pragma: no-cache
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025C23
x-userhostaddress: 91.90.42.0
x-correlationid: aff42150-2945-414b-9719-b581e2fe7b6f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-officefe: AM1PEPF00025C23
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025C23
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: FE5CAB03B0B34DDB95DF196D589CCEF8 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T04:00:16Z
date: Thu, 25 Apr 2024 04:00:16 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: ef86ba55-f66b-4d78-8565-c27913e58419
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53427
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ef86ba55-f66b-4d78-8565-c27913e58419
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 43a9eb2f-bed8-41d8-b81f-7ea74d141d3e
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/PodHandler.ashx?action=SendUserInfo&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-. HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
WaitForSessionTimeoutMs: 0
X-CorrelationID: 6cbe0cb6-ed7d-4bfa-9c31-fdcfdadc1eb1, b4aa605c-6cc0-4d46-843a-8d83a0af4873
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 395
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 51a3a89b-0d32-4946-b156-794f7d0117bd
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: e2fabc86-bbc2-4176-8da0-52baff30a7c6
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
lastpodeditcompleteutc: 01/01/001 00:00:00.000
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 35EE213D31964A1F87F6380D7681B059 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 2.5 kB URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 78aa7aae71b60eb4655fbf1c8de86149
3203251a7e128ee9072cb4e3ca52f890878378a2
a71d2291a0e208e2063680edf6572ea67fdb808a496f62b688f20eb4fb9af333
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 1bb70bad-fbb1-46cb-a7ae-d0a4be6de096
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 140
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2512
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1bb70bad-fbb1-46cb-a7ae-d0a4be6de096
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 30799f26-dd11-48de-a0bf-b4a8e5a59f94
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 732DD96E37E24DD98E915038FE2A5CFE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=863e5979-bbcb-4a59-9b64-ee5925383913
304 B URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=863e5979-bbcb-4a59-9b64-ee5925383913
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash bb21c15b5c0ec1ba61dd55ef7d003b22
7b339b577fbfc2421e97c9a303656fae7cb47c1a
bf8975ca224e0a4ce0c773f7e3416af07222e25f37cb688a3e5f216cdf7264f3
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=863e5979-bbcb-4a59-9b64-ee5925383913 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: 971f1c5f-1110-4184-8955-bb14f4c2093b
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-LastPodRCLocation: AM4PEPF0002D704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1568
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 304
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 971f1c5f-1110-4184-8955-bb14f4c2093b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 5c295bae-88e5-40ca-bc4d-d66e22b3192c
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: 2197F8F48A084A4EAC6FD44E02E3B743 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hDEE3F51B0E4F82D6_PptScripts/1033/office-version-history-strings.min.js
200 OK 1.2 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hDEE3F51B0E4F82D6_PptScripts/1033/office-version-history-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4199), with no line terminators
Hash 8c2c5667a34c93f3ce47ff9da84dd691
7224adc5cda6dc87068e43d378d8dee15bff332d
dee3f51b0e4f82d6397d04cb2f8d25b2b8b7f15d499296e57d9911ee218fddd6
GET /officeonline/pods/s/hDEE3F51B0E4F82D6_PptScripts/1033/office-version-history-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1212
last-modified: Sun, 21 Apr 2024 17:27:00 GMT
x-ms-request-id: ae9a47cb-e01e-0004-021f-947290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718848,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b880&TotalRTCDNTime=2&CompressionType=br&FileSize=1212"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h78F9F72470BAF338_PptScripts/1033/friendly-dates-strings.min.js
337 B URL res-1.cdn.office.net/officeonline/pods/s/h78F9F72470BAF338_PptScripts/1033/friendly-dates-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1042), with no line terminators
Hash 5aeffdad41f3963fafa3977df48eb077
004e8b3befe35922d582fd75a5b0dd80a7304eb0
78f9f72470baf338199d5e64c71fe159050e6d4e540beb9a300862d91c8b54e0
GET /officeonline/pods/s/h78F9F72470BAF338_PptScripts/1033/friendly-dates-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 337
last-modified: Mon, 22 Apr 2024 16:35:38 GMT
x-ms-request-id: 7279f19f-301e-0028-59d8-949e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718850,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b882&TotalRTCDNTime=2&CompressionType=br&FileSize=337"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h41500057B35FF14A_PptScripts/1033/version-history-sprite.min.js
1.3 kB URL res-1.cdn.office.net/officeonline/pods/s/h41500057B35FF14A_PptScripts/1033/version-history-sprite.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12591), with no line terminators
Hash 1097b61e96b6cbefe08f0209c6d1f174
d3aabeeafdb30f322435d76bed42158650985ca6
41500057b35ff14a4ff2b4fde7401aac78ece036f32e71ef4cfc23e0cdb535de
GET /officeonline/pods/s/h41500057B35FF14A_PptScripts/1033/version-history-sprite.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1254
last-modified: Sun, 21 Apr 2024 08:58:58 GMT
x-ms-request-id: 9aa1651b-001e-0051-2ed3-93621b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370718858,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b88a&TotalRTCDNTime=2&CompressionType=br&FileSize=1254"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=2987bc89-9316-4a84-b43d-de58258247b2&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fsldw960%2Fsldh540%2Fver17%2Fsl
200 OK 481 B URL GET HTTP/2 powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=2987bc89-9316-4a84-b43d-de58258247b2&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fsldw960%2Fsldh540%2Fver17%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash fe728040a22f0131f68d02d01fadb1a9
ce63926b2169e8cc686707281389e0beb08e099c
7840d9152cb8065ec3161e364a7be1f9cdf015b5349ffe57a6f9cf9bb1016e50
GET /pods/images.ashx?si=undefined&action=2987bc89-9316-4a84-b43d-de58258247b2&waccluster=PNL1&Iid=sid260%2Fcid3452730715%2Fsldw960%2Fsldh540%2Fver17%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: e22afdaa-bdfb-4afc-88e8-e9d545f17ed4
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 481
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "43748391"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e22afdaa-bdfb-4afc-88e8-e9d545f17ed4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f71f5482-fce8-47d6-81a5-8fe1fd4f0be0
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 27C2590B6BEC481CA67A30D74EE82A48 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx
200 OK 143 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/PowerPoint.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d5c27dfaa8fef3acc33e469ccc2b125a
038843bf308948955ec1d87698dab8827ba7ba0e
b07601878ada73fafaaab2a237454f4e53e41670fd1d24bf3adab1e4fa749798
POST /pods/PowerPoint.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 47f603b1-13f4-4f45-9b58-e40e6370b3e5
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 936
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 143
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 47f603b1-13f4-4f45-9b58-e40e6370b3e5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3820b19b-b6b8-488e-a7eb-f4f015e34b71
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 12855BA1F36F47BF9DE4306C184B6B92 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: b9d48b2b-23cd-4f0c-bf0a-fdc755c0b37a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h334DDD4AFB5083F3_PptScripts/wp5/versionHistory.min.js
27 kB URL res-1.cdn.office.net/officeonline/pods/s/h334DDD4AFB5083F3_PptScripts/wp5/versionHistory.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 465bd9339ab1ed5ca70625dfd0314d86
d224030277236c850ca8672f8a686d4800fbd809
334ddd4afb5083f396fdde9f04f678d13e76f1f554a85ba2562357bd57d24143
GET /officeonline/pods/s/h334DDD4AFB5083F3_PptScripts/wp5/versionHistory.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27286
last-modified: Thu, 11 Apr 2024 04:49:18 GMT
x-ms-request-id: a7806b71-701e-0016-7be3-8f0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370719112,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b988&TotalRTCDNTime=2&CompressionType=br&FileSize=27286"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 57e35420-c4b1-4a10-a377-dd7d72267bd0
x-usersessionid: 57e35420-c4b1-4a10-a377-dd7d72267bd0
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 841782c0-660a-41c1-9471-e60f1256e0ab
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 9AA72A673495438CAAB4EB9EF93F3DCF Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: e0f7eb66-44f3-4efc-94ad-e88d85569507
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 14434
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e0f7eb66-44f3-4efc-94ad-e88d85569507
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: f522c89d-b10a-466b-b347-fc3da790452b
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hD7FB468D148EBEB4_PptResources/1033/rehearsalsummarypage.css
2.5 kB URL res-1.cdn.office.net/officeonline/pods/s/hD7FB468D148EBEB4_PptResources/1033/rehearsalsummarypage.css
IP
ASN #20940 Akamai International B.V.
Hash adbc4f5248c5537d108a7bf0c3f31f10
ed9cca1a416329f7501cb23cd68748846e2691ca
d7fb468d148ebeb444021210617db24d099d73fd46db1d359f56a966b95b3ce3
GET /officeonline/pods/s/hD7FB468D148EBEB4_PptResources/1033/rehearsalsummarypage.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2462
content-type: text/css
last-modified: Sat, 20 Apr 2024 10:33:27 GMT
x-ms-request-id: c53bfd46-f01e-0008-660e-93e598000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370719153,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017619.1618b9b1&TotalRTCDNTime=3&CompressionType=br&FileSize=2462"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6da0bebe-1132-41ff-adef-ff24bd4a768d
x-usersessionid: 6da0bebe-1132-41ff-adef-ff24bd4a768d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 9ccb06af-d248-46d2-ae16-8703dccbd3a4
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E79F7077D97349DCAAD7E01C458087AA Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ce918f60-45e2-4032-b738-8867f6233266
x-usersessionid: ce918f60-45e2-4032-b738-8867f6233266
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 9cab1f7d-a7cd-4c88-aa25-98c41e35805a
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: CFE308F107194FDCA11BB25B141CDC00 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b58a2c67-5f56-441c-b31c-8b7e7077b610
x-usersessionid: b58a2c67-5f56-441c-b31c-8b7e7077b610
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3f6b7fb0-bee1-4e2a-94d2-1ffadbec4ff0
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: AA9DF8DFF2FC4679B855B1AC3DEB316F Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a3b34ad8-a69b-4aee-89cb-881b8043c007
x-usersessionid: a3b34ad8-a69b-4aee-89cb-881b8043c007
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: cc8e0c5e-6ba0-4d5a-943c-18dfbad19663
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_visioslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: B5FAC05A88E34A3A90D137366B3BD044 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 806a3982-311d-44d4-951c-42252ccb8b97
x-usersessionid: 806a3982-311d-44d4-951c-42252ccb8b97
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D694
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 25a1d5e3-7240-4e93-aa0b-d28b9e6bed0d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D694
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E776A8706BDB4CF1805DA8CBEBEF8D01 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5852
content-type: image/png
expires: Fri, 25 Apr 2025 04:00:19 GMT
etag: undefinede1ea81ef-6ea9-4b30-a312-76463cd780eb.png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 74a5ceb8-8ade-4934-93e1-1857c4be7d01
x-usersessionid: 74a5ceb8-8ade-4934-93e1-1857c4be7d01
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: c4b9b502-2fa9-475d-89b8-f9aa9aa66063
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: B43A74DA682747D09FC3EB96AEAE5E0C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: dd1b9561-0ec9-4a6f-b175-2da16afde74b
x-usersessionid: dd1b9561-0ec9-4a6f-b175-2da16afde74b
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 2ad877c4-1ca6-49ac-bafb-698ee1e6e209
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 8C764077B8FF40CD94F274CC7FCA234B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 14c397f3-8f75-4af5-a8c3-8ed545e8fe75
x-usersessionid: 14c397f3-8f75-4af5-a8c3-8ed545e8fe75
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 1e26774f-f005-422f-9db3-6febd04255e7
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 14772F1EB45D47E9BF98D087F87C1169 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
200 OK 5.9 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 735 x 81, 8-bit/color RGBA, non-interlaced
Hash 1bbed216fac2f415753902d84f470301
90355c0b8a5286f4efb6384b735c57f50c6cfdd6
b18588acbb7d0a20812ed9c88b923aee9cdc6db739d0114b78aa574d0d701aa9
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=e1ea81ef-6ea9-4b30-a312-76463cd780eb.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5852
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 7cfb4b00-4d17-4948-ae80-940136fe6176
x-usersessionid: 7cfb4b00-4d17-4948-ae80-940136fe6176
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 774065d9-8e8e-4223-ba60-566f40bdfe00
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 48E1F13894374E2CB07D69C82551D27F Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
200 OK 8.0 kB URL GET HTTP/2 powerpoint.officeapps.live.com/pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 882 x 81, 8-bit/color RGBA, non-interlaced
Hash aea4de2ec85114910cc1598d6af3ba5a
e7518e477c400a93052ad2e9ddd9b5e9910fde37
742471e28544eda292102eb82892af6b772f076cc57784fd526d5aad75111ff3
GET /pods/editImageHandler.ashx?WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&sc=host%3D%26qt%3DDefault&wdo=2&usid=&si=undefined&waccluster=PNL1&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&cl=SlideLayoutActor&Rid=553d620c-c55d-4965-8884-710afdc52ec7.png HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 8017
content-type: image/png
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b077bcad-9079-4ef9-92d4-a513aa025197
x-usersessionid: b077bcad-9079-4ef9-92d4-a513aa025197
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 105cae66-0bae-4e77-a074-d6c7390a26d5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: EE35C1A15D7A4920B4029804295EB594 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=380cad09-0328-4b39-8923-1383e5203c18
933 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=380cad09-0328-4b39-8923-1383e5203c18
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9c1c7d29effa460c596b1f03d4be20ee
f0ac32450d239a9b0e397cb8a7ca1b7160ed076a
f895dbe50c040420082dbfcfbee31886e46accd6179f97790bdd1a49c11803c6
POST /pods/PowerPoint.ashx?action=380cad09-0328-4b39-8923-1383e5203c18 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: cfd55f67-0e00-406d-aee6-84741440ef12
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 933
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: cfd55f67-0e00-406d-aee6-84741440ef12
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 33a48b68-31be-4250-8fe3-c8b1fa89e8eb
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E3C2D9D1FF234CEA952068474EEB5E0E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693
0 B URL store.office.com/gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 04:00:20 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-HxMc78nVg9eAZwpqHBQN2CYy0DV/fcuL/p9tofjdHLA=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: 4c9216623981fbdbb3b27544f0898a5c
x-correlationid: 4c921662-3981-fbdb-b3b2-7544f0898a5c
x-machine: OMEXNODES000002__omexexternal-prod-weu-001_2
x-buildversion: 24.4.10415.11006
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: ad815372-f373-4618-b57d-0a7a9f6db5ce
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=ae27545c-6076-40d3-9324-fe69eaeaf2ec
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=ae27545c-6076-40d3-9324-fe69eaeaf2ec
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=ae27545c-6076-40d3-9324-fe69eaeaf2ec HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 023b2a03-8366-4ca4-9fa2-01afee625882
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 023b2a03-8366-4ca4-9fa2-01afee625882
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 1ce70c2e-5f59-4156-a909-95063b889972
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: FBC4CF3E7CA24683BA2C7DBDA5F2227B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:20Z
date: Thu, 25 Apr 2024 04:00:20 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/p/AddinServiceHandler.ashx?action=laststoreupdate&app=2&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
1.2 kB URL powerpoint.officeapps.live.com/p/AddinServiceHandler.ashx?action=laststoreupdate&app=2&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /p/AddinServiceHandler.ashx?action=laststoreupdate&app=2&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3%21140&access_token=4whsZVg%5FRfrqbDEb3We1eKC2c7nqUbtUrg%2DV9IIxT%5FEZIEWouIwrC8sl2CHP9gYjO%2Dni0K1Uv%2DArWpDyqmA%5FdislduKJkO%5FFjvmGyXyu01R8jjB5%2DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%2DoeCc7AuLU0&access_token_ttl=1714449603063 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-CorrelationId: 101a7e2d-330c-4ec8-a856-015c423eb7ff
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 101a7e2d-330c-4ec8-a856-015c423eb7ff
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D67A
x-officeversion: 16.0.17615.40511
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D67A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F28487D98BFB4F5DA419CE5C2615B46A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:20Z
date: Thu, 25 Apr 2024 04:00:20 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://powerpoint.officeapps.live.com
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash bd3d94bab2526837ba869f9d0a6f8e82
6e0546c56f1018d7d9863351d557b261ce902658
b259b2f7d16bfc7b968ed54a107b6a0a0803781680962999c704781bf22bd10e
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360
upload-time: 1714017620363
time-delta-to-apply-millis: 217
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 124200
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 228
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:20 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ms-mac-appid,x-ms-mac-hostingapp,x-ms-mac-version
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=bddcc417-8cda-40e0-9416-de98296fbb95; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=bddcc417-8cda-40e0-9416-de98296fbb95; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8F7FC3CC624D4F6886F94119153F1A81 Ref B: SVG20EDGE0407 Ref C: 2024-04-25T04:00:20Z
date: Thu, 25 Apr 2024 04:00:19 GMT
content-length: 0
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: application/json
x-ms-mac-hostingapp: wac-2157-floodgate-sdk
x-ms-mac-appid: 4728a857-9526-497e-86ae-91e156da11a2
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 3716
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=455344bf-1301-4cf2-9abc-777465d93268; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=455344bf-1301-4cf2-9abc-777465d93268; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 218e3e7a-0b4a-4faa-bacc-12c2c16658d4
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A29FED9ABD0140ACA8A94E7353F4B7BF Ref B: SVG20EDGE0407 Ref C: 2024-04-25T04:00:20Z
date: Thu, 25 Apr 2024 04:00:19 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=28c6fff7-48fb-416d-b637-7b86696e18f3&waccluster=PNL1&Iid=sid261%2Fcid3069746641%2Fsldw960%2Fsldh540%2Fver18%2Fsl
200 OK 479 B URL GET HTTP/2 powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=28c6fff7-48fb-416d-b637-7b86696e18f3&waccluster=PNL1&Iid=sid261%2Fcid3069746641%2Fsldw960%2Fsldh540%2Fver18%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 98338afb9554cffab6a3aaa57c3da6fe
c332390b84737486c81d637f202bba48f0819524
e79c8de80b45be681c5d72a1234082af1d2c9960507efe5dc329dfd2b130b01f
GET /pods/images.ashx?si=undefined&action=28c6fff7-48fb-416d-b637-7b86696e18f3&waccluster=PNL1&Iid=sid261%2Fcid3069746641%2Fsldw960%2Fsldh540%2Fver18%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: e548041d-3d7a-46f7-8bab-3d9d9ac79717
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "29407967"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e548041d-3d7a-46f7-8bab-3d9d9ac79717
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 945b13bf-ca02-481d-a264-29c4ce4cae1f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: A20B4FD01BE84C2EA7B15A0455BED4D7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:20Z
date: Thu, 25 Apr 2024 04:00:20 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://powerpoint.officeapps.live.com
date: Thu, 25 Apr 2024 04:00:20 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: b664cab4b3f24a739be75b93b026749e-65c206a3-a985-48b4-8b50-36c56c3ce309-7201
upload-time: 1714017621339
time-delta-to-apply-millis: 217
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 4204
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 34
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:21 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 8b1b3742-b032-42e7-bfa7-5bda1bdee38e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:21 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 743624d0-666c-43a6-8df3-fa104b22b497
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 34786
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 743624d0-666c-43a6-8df3-fa104b22b497
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: be335e6a-7a43-44d6-a916-b424232651ce
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:21 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=0f33093b-5f36-4771-81f3-fce7cdc9ee6e&waccluster=PNL1&Iid=sid262%2Fcid3752366348%2Fsldw960%2Fsldh540%2Fver19%2Fsl
481 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=0f33093b-5f36-4771-81f3-fce7cdc9ee6e&waccluster=PNL1&Iid=sid262%2Fcid3752366348%2Fsldw960%2Fsldh540%2Fver19%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 2cbea140d3973b6b0f5cbbbe8692ab5c
9d683bb5c14bc1bb3547be9316b8adff6c0c7708
470b214424dc0b71217489454ec4778f351b3f1b284f9002e66eb0af3342c0c0
GET /pods/images.ashx?si=undefined&action=0f33093b-5f36-4771-81f3-fce7cdc9ee6e&waccluster=PNL1&Iid=sid262%2Fcid3752366348%2Fsldw960%2Fsldh540%2Fver19%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 709a9c7b-05f8-4140-bbf4-6130d36fe913
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 481
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "48011907"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 709a9c7b-05f8-4140-bbf4-6130d36fe913
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: e83342d9-2ded-417c-aa23-51195b5cbbac
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 5BC5D3EFAB25404C8B7343D76D09973E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:21Z
date: Thu, 25 Apr 2024 04:00:21 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 188afe5b-5dda-4d5b-ba74-6008ca47336a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:21 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 386681e8-ccb7-478f-b839-6d7b12858417
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 13342
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 386681e8-ccb7-478f-b839-6d7b12858417
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: d6125c42-2235-4c99-b65f-4e7cfb252673
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:21 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js
200 OK 11 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (39486)
Hash 9d0222e89d75295f9ab075ef957cf1fd
a083c8b0e6838d912c4a53b3db4fe813e99958e2
fec1c75d2fa91b6d5346593f850045ccba9ee9072a86ddb95a7db91f9cbb56ce
GET /officeonline/pods/s/hFEC1C75D2FA91B6D_PptScripts/augloop-runtime-shim-ie.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11165
last-modified: Sun, 21 Apr 2024 16:31:06 GMT
x-ms-request-id: bc2d51ae-901e-006c-580b-941400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729110,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e096&TotalRTCDNTime=2&CompressionType=br&FileSize=11165"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js
4.3 kB URL res-1.cdn.office.net/officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (18413), with no line terminators
Hash 4653986a0c1eadfece4ff24eabfb9332
46fffae9ed3ac712ccb9fa08fc5677b8da883423
41d0c85d893d8b2a2bab6b8b7b759a1a5bcec3c195857159a298f02104e0a7da
GET /officeonline/pods/s/h41D0C85D893D8B2A_PptScripts/1033/powerpoint-presenter-coach-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4307
last-modified: Sun, 21 Apr 2024 17:21:51 GMT
x-ms-request-id: 8b90634e-101e-003f-2b1e-943734000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729348,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e184&TotalRTCDNTime=2&CompressionType=br&FileSize=4307"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 7278b4d3-41dd-45f6-9447-d822e67cbe04
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:22 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js
200 OK 44 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (49259), with NEL line terminators
Hash 7487f4e7aa616b911e90fdc4b3c2180e
4aabb874e9df3b41b490f780dc2af9782fb83d30
0d05dad47e626bb3870cac42badce8849b8cd56e799132caa0bc173a7f016832
GET /officeonline/pods/s/h0D05DAD47E626BB3_PptScripts/ir-plugin-ski.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43646
last-modified: Sun, 21 Apr 2024 04:28:23 GMT
x-ms-request-id: c27f7856-801e-002d-6aa9-934ce4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729415,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e1c7&TotalRTCDNTime=2&CompressionType=br&FileSize=43646"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
js.live.net/v5.0/wl.ms.js
200 OK 16 kB URL GET HTTP/1.1 js.live.net/v5.0/wl.ms.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectonedrive.com
FingerprintE9:FF:31:7F:0C:79:4E:6C:11:09:23:F9:09:E5:77:ED:06:E0:4D:ED
ValiditySun, 11 Feb 2024 21:04:50 GMT - Wed, 05 Feb 2025 21:04:50 GMT
File type JavaScript source, ASCII text, with very long lines (43338), with no line terminators
Hash c6ba4d44d3740688e6bdf01dace5b7eb
389a1825b6aad7cd758e2488ae1fcb3de2205dbb
d4c9bd86a5465d8414b7a10438d28110836126b387990d492fe545a5e701904a
GET /v5.0/wl.ms.js HTTP/1.1
Host: js.live.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 10 Jul 2020 18:30:22 GMT
Accept-Ranges: bytes
ETag: "0b3b92be856d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-MSNServer: 7fd5ff5fbf-sml2p
X-ODWebServer: eurwesteur001307-odwebp
Access-Control-Allow-Origin: *
Date: Thu, 25 Apr 2024 04:00:22 GMT
Content-Length: 16221
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 6eeb26d3-8c97-49ed-8ebb-23127cb18a8d
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57989
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 6eeb26d3-8c97-49ed-8ebb-23127cb18a8d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: a3a881ce-1595-4321-8233-13f82e1c4959
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:22 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js
3.2 kB URL res-1.cdn.office.net/officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (551)
Hash cac00c4d61d07d31d9ae4333d832725b
2a74dca5d9bd88ca7e6d83dad81610c3dd86a19c
b2ae040b824b2dbe8578c668ea059b23a04ca660ff84099620c33371e96ffab3
GET /officeonline/pods/s/hB2AE040B824B2DBE_PptScripts/ppteditDS.infrared.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3177
last-modified: Thu, 11 Apr 2024 04:45:05 GMT
x-ms-request-id: be5abcfe-e01e-003b-5716-8fba33000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729793,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e341&TotalRTCDNTime=2&CompressionType=br&FileSize=3177"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js
87 kB URL res-1.cdn.office.net/officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (35141), with NEL line terminators
Hash 82f705f91af2ea420b27f69bd471d2ec
0a5e2a268e78e6e7686edc36440706efcb751cf9
dbfeecdd47494c888aa779eaa3962217986d6e319371b7615f76fe80dbdb6688
GET /officeonline/pods/s/hDBFEECDD47494C88_PptScripts/microsoft.ideas.runtime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 87203
last-modified: Sat, 20 Apr 2024 15:34:59 GMT
x-ms-request-id: b6f1e395-e01e-0059-0c4d-937814000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729838,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e36e&TotalRTCDNTime=2&CompressionType=br&FileSize=87203"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hD24F672CC3E5C400_PptScripts/ppteditDS.smartlookup.js
32 kB URL res-1.cdn.office.net/officeonline/pods/s/hD24F672CC3E5C400_PptScripts/ppteditDS.smartlookup.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (637)
Hash 55512a5477fa896cc32061b44b4c918a
eb31f37663d0a7abe58464a3819149227643447c
d24f672cc3e5c4007b9c5a65d26e1c7450de579812f4f7ce9e52c1c4a01d24d6
GET /officeonline/pods/s/hD24F672CC3E5C400_PptScripts/ppteditDS.smartlookup.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32524
last-modified: Thu, 11 Apr 2024 04:44:31 GMT
x-ms-request-id: 276a76e1-301e-005a-5f27-8f9970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370729892,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e3a4&TotalRTCDNTime=2&CompressionType=br&FileSize=32524"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h85CBB7F5159E227F_PptScripts/pptVersionHistory.js
24 kB URL res-1.cdn.office.net/officeonline/pods/s/h85CBB7F5159E227F_PptScripts/pptVersionHistory.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1037)
Hash ca6a0022b31dd8e5e670a311cbe6512b
521d4a837c5c7f8c5e9bed1cead7b66d933d88d9
85cbb7f5159e227ff1b37a733d30dfdca40be6c537a0f22da0c358963fc470ae
GET /officeonline/pods/s/h85CBB7F5159E227F_PptScripts/pptVersionHistory.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23857
last-modified: Sun, 21 Apr 2024 22:28:05 GMT
x-ms-request-id: 67c3c1fc-b01e-0019-193c-947f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370730541,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e62d&TotalRTCDNTime=2&CompressionType=br&FileSize=23857"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js
200 OK 2.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (578)
Hash b2e29af1ea99f4b49315e93234f890d7
48c1a490a3def60cd312d5b37b27a945863b5f7c
0eb7adc9626775a4b1b81e6c5c6479a194cdf5cf096230025dde0dc85f22dcbc
GET /officeonline/pods/s/h0EB7ADC9626775A4_PptScripts/ppteditDS.ideas.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2883
last-modified: Thu, 11 Apr 2024 04:44:56 GMT
x-ms-request-id: 059b789a-701e-0016-4319-8f0940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370730559,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e63f&TotalRTCDNTime=2&CompressionType=br&FileSize=2883"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 3cdaad4f-f54d-4f1d-ba11-72f682288ee5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:22 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js
200 OK 43 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (693)
Hash d818f3327b0f48d884d2f63cbe47ff5a
e19aa9f20077a1201a87abcbe4d20860519cd999
90fbd504db84cfd796afa34208831464aa2026aa5c07def6d2c8fe126279ecf7
GET /officeonline/pods/s/h90FBD504DB84CFD7_PptScripts/ppteditDS.augloop.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 42910
last-modified: Thu, 11 Apr 2024 04:43:59 GMT
x-ms-request-id: 0ad4c9c3-201e-0046-2616-8fcb10000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:22 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370731114,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017622.1618e86a&TotalRTCDNTime=2&CompressionType=br&FileSize=42910"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=93d7e555-4867-439b-a791-4e61a0feb10c&waccluster=PNL1&Iid=sid263%2Fcid977679593%2Fsldw960%2Fsldh540%2Fver22%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=93d7e555-4867-439b-a791-4e61a0feb10c&waccluster=PNL1&Iid=sid263%2Fcid977679593%2Fsldw960%2Fsldh540%2Fver22%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 40d65fbb70722aa6b83c05e5c0b1821f
ff8548333129ad784f56fc54a352caf18cd3d5f9
10b1f7d059439f72a58995b55347cfde8e41b1d9b4f99e6a046fc10086acf191
GET /pods/images.ashx?si=undefined&action=93d7e555-4867-439b-a791-4e61a0feb10c&waccluster=PNL1&Iid=sid263%2Fcid977679593%2Fsldw960%2Fsldh540%2Fver22%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 4f4756ed-5eb8-4676-9f1d-426146a378b8
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "11019255"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4f4756ed-5eb8-4676-9f1d-426146a378b8
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 22bc2d4f-af56-48f5-ac6e-fdbe03b14379
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 92D9F5FC93EF40B8AFBDCB7D9D5B786A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:22Z
date: Thu, 25 Apr 2024 04:00:22 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 4145253d-a033-49b2-8ba0-1194b145bd4f
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 58836
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 4145253d-a033-49b2-8ba0-1194b145bd4f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 6c3a028d-5e85-4be0-acad-3ce44fba62c2
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:22 GMT
content-length: 0
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/current/version.json
78 B URL uci.cdn.office.net/mirrored/smartlookup/current/version.json
IP
Hash fed6ca4077e22d276c81561cf49fef1f
175de3d2cba388fc02b67b4010f8d1a006556da1
1e3d04dff87926797ca5564dea2c8d316268f01e483ae052d9971e411bf077e8
GET /mirrored/smartlookup/current/version.json HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 78
Content-Type: application/json
Content-MD5: /tbKQHfiLSdsgVYc9J/vHw==
Last-Modified: Tue, 16 Apr 2024 17:46:16 GMT
ETag: 0x8DC5E3D1D81484F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0931613a-c01e-0013-1226-90fe28000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Cache-Control: max-age=278
Expires: Thu, 25 Apr 2024 04:05:00 GMT
Date: Thu, 25 Apr 2024 04:00:22 GMT
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/pods/s/h4AEC1D6612625622_PptScripts/coachactorpackage.min.js
117 kB URL res-1.cdn.office.net/officeonline/pods/s/h4AEC1D6612625622_PptScripts/coachactorpackage.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (36930), with NEL line terminators, with escape sequences
Size 117 kB (117099 bytes)
Hash 7572c1f0eed5e15d6cacb0e4d3839a6a
3133c81b977dcf79357451ef53e96e172ae87187
4aec1d6612625622fa297e4244582c906416c3a3a872422ab292e4e4938c27a3
GET /officeonline/pods/s/h4AEC1D6612625622_PptScripts/coachactorpackage.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 117099
last-modified: Sun, 21 Apr 2024 17:16:09 GMT
x-ms-request-id: ae7ad045-e01e-0004-271b-947290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:23 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370731356,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017623.1618e95c&TotalRTCDNTime=2&CompressionType=br&FileSize=117099"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=pptwac&culture=EN-US
112 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=pptwac&culture=EN-US
IP
File type HTML document, ASCII text, with very long lines (56433), with CRLF, LF line terminators
Size 112 kB (111966 bytes)
Hash 5a1b0c89d61e27a27c87acfd631d0ad7
cfeceabd7e9fea7be4e166270e08359d8f77ec20
944246ab119f79e62cf4ecb9a92b9037634110f1cc628b1afca67bd08a47d712
GET /mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=pptwac&culture=EN-US HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-MD5: WhsMidYeJ6J8h6z9Yx0K1w==
Last-Modified: Mon, 15 Apr 2024 16:15:35 GMT
ETag: 0x8DC5D6748253ECF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1c499270-601e-008c-347c-8fb22a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30735323
Expires: Tue, 15 Apr 2025 21:35:46 GMT
Date: Thu, 25 Apr 2024 04:00:23 GMT
Content-Length: 111966
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/pods/s/hA6B994B8E55E01A5_PptScripts/al.min.js
85 kB URL res-1.cdn.office.net/officeonline/pods/s/hA6B994B8E55E01A5_PptScripts/al.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash ee3437d73e30095e0d85ef550db9c9e2
f4675b23da33da71dfee692095d06bed840bf30b
a6b994b8e55e01a54722935d0415b3a9071b5b5bcd30505ed2300a212babbdc7
GET /officeonline/pods/s/hA6B994B8E55E01A5_PptScripts/al.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 84757
last-modified: Thu, 11 Apr 2024 04:45:32 GMT
x-ms-request-id: c9bd63c2-101e-003f-1816-8f3734000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:23 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370731851,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017623.1618eb4b&TotalRTCDNTime=2&CompressionType=br&FileSize=84757"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js
715 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js
IP
File type JavaScript source, ASCII text, with very long lines (16593)
Size 715 kB (715225 bytes)
Hash ae33ac3dcf82ce0423552b4548b70eee
e28e6a50143f99d2ec4149c1d1e0d37f9b4c4911
ade6d24c9709dbe33eb0ceb63136b17981c83a4b6191fc208585629b70ed4909
GET /mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: rjOsPc+CzgQjVStFSLcO7g==
Last-Modified: Mon, 15 Apr 2024 16:15:46 GMT
ETag: 0x8DC5D674EF38F9A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: de0e2217-701e-005b-497c-8fe31f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30735354
Expires: Tue, 15 Apr 2025 21:36:17 GMT
Date: Thu, 25 Apr 2024 04:00:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js
80 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js
IP
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 94a1b38601fd67a4ba82fab464d81cf6
0455f8367b50d0ca8ed994f4fd2c9484b8412108
b9de3de4e59a33d0effba7a3b2c8161c2382503ff0f17ad30397244a7384f692
GET /mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: lKGzhgH9Z6S6gvq0ZNgc9g==
Last-Modified: Mon, 15 Apr 2024 16:15:45 GMT
ETag: 0x8DC5D674E47B172
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6f6fddf2-201e-0056-267c-8f2bcb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30735368
Expires: Tue, 15 Apr 2025 21:36:31 GMT
Date: Thu, 25 Apr 2024 04:00:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/pods/s/hF94339792E2E1813_PptScripts/coachpackage.min.js
57 kB URL res-1.cdn.office.net/officeonline/pods/s/hF94339792E2E1813_PptScripts/coachpackage.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 29dca8a816ddba3f145b0d13bb08b502
e8ada8967f3366644b870000becc479583d09762
f94339792e2e18137e771fb4ff3d22fb68a2595ba0e12d0d567eac8709120077
GET /officeonline/pods/s/hF94339792E2E1813_PptScripts/coachpackage.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 56692
last-modified: Sun, 21 Apr 2024 13:14:07 GMT
x-ms-request-id: 68107e91-401e-0022-0ef2-933a88000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:23 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370734771,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017623.1618f6b3&TotalRTCDNTime=2&CompressionType=br&FileSize=56692"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 22eccfbb-1e1f-4bc2-be5d-16dc322ce12a
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 17081
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 22eccfbb-1e1f-4bc2-be5d-16dc322ce12a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: ba713838-23f1-4a70-bfba-5ed0db056d22
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:23 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://powerpoint.officeapps.live.com
date: Thu, 25 Apr 2024 04:00:23 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: a29d6811-6a7e-4486-9b83-f18d2f8fd575
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:23 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=74045a5c-9030-4ffe-8902-0f05341a5f89&waccluster=PNL1&Iid=sid264%2Fcid3627650680%2Fsldw960%2Fsldh540%2Fver23%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=74045a5c-9030-4ffe-8902-0f05341a5f89&waccluster=PNL1&Iid=sid264%2Fcid3627650680%2Fsldw960%2Fsldh540%2Fver23%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash fbc5af6642d381ffa7545c659213d476
bb048872c7809b9016e383ada6e8fd4204c75a2c
5966c0415bc507a65be71cdfc7d51af93b467b44966c0a91f066d2311959c375
GET /pods/images.ashx?si=undefined&action=74045a5c-9030-4ffe-8902-0f05341a5f89&waccluster=PNL1&Iid=sid264%2Fcid3627650680%2Fsldw960%2Fsldh540%2Fver23%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 0fab526e-62af-4f09-b8f2-ae4bbe9b0006
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "44762306"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0fab526e-62af-4f09-b8f2-ae4bbe9b0006
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 31313fc1-3003-4521-8693-a34b03ab555d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: E2763E84F05A40EA98A197700407A17C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:24Z
date: Thu, 25 Apr 2024 04:00:23 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: fa8fe70a-2b5e-45cf-a466-9e46494488bc
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 1139
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: fa8fe70a-2b5e-45cf-a466-9e46494488bc
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 1bf68d14-b5a0-4d52-8540-516d5b7b1215
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:23 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintF3:31:D8:34:CB:8D:8F:CD:13:13:8F:EE:F2:2D:7F:B6:1F:AB:44:C3
ValidityMon, 18 Mar 2024 00:51:34 GMT - Thu, 13 Mar 2025 00:51:34 GMT
Hash cfb70136cf464a8086f7eea9d46dce49
ccf5258bff5b3a1a62d1628646a4236445428a61
5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 35612b11d234460da5c673d7b172fd93-f8762c6b-96cb-4e60-87fa-015aac0c2ff1-7212
upload-time: 1714017623463
time-delta-to-apply-millis: 217
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 77966
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 613
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:23 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h7CFC9F99B5F8D3BC_PptResources/1033/CoachActorPackage.css
3.6 kB URL res-1.cdn.office.net/officeonline/pods/s/h7CFC9F99B5F8D3BC_PptResources/1033/CoachActorPackage.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21075), with no line terminators
Hash 5937d6ac923ccc68f80ea4f0904fe279
4614dda842901656060e498abb914b83ddb7fecd
7cfc9f99b5f8d3bcadf1acd0bde953f85c6716efc6f1b0c9593544a3d678b012
GET /officeonline/pods/s/h7CFC9F99B5F8D3BC_PptResources/1033/CoachActorPackage.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3560
content-type: text/css
last-modified: Sun, 21 Apr 2024 17:24:52 GMT
x-ms-request-id: 702ef70e-401e-0040-5719-94f8af000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:24 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370735934,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017624.1618fb3e&TotalRTCDNTime=3&CompressionType=br&FileSize=3560"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
augloop.office.com/
0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://powerpoint.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KI7Gx7SbjbfblYLjiTsW4g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/2 200 OK
date: Thu, 25 Apr 2024 04:00:23 GMT
server: Kestrel
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-origin: 60ADCADAB9998E0E687618A9DE4600C697C7F2FADD864A40DDC60FB7A6188CC3
x-rp-instance: _D2Worker_227
x-rp-routeid: v2Route
x-rp-clusterid: BackendMastermindMain
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 6ced4da4-c53c-4dae-bf11-8bccb12777f4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:23 GMT
content-length: 0
X-Firefox-Spdy: h2
augmentation.osi.office.net/officeaugmentation/searchendpointv4/
34 B URL augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-correlationid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: text/plain; charset=utf-8
content-encoding: gzip
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_1
x-officeversion: 16.0.17623.42625
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 084584f8-7c9d-4d57-a6c6-855e2ff570c3
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-methods: POST
access-control-allow-headers: content-type,x-correlationid
access-control-max-age: 86400
access-control-expose-headers: *
x-officeprocessid: 7512
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Thu, 25 Apr 2024 04:00:24 GMT
content-length: 34
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 465f91f0-400d-4a6b-b29e-5d16b4d9187e
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 16080
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 465f91f0-400d-4a6b-b29e-5d16b4d9187e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: c083591f-d3f7-42ec-854a-1335c3e0b006
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:24 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
252 B URL powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 49caabc1660ba77f4de082c32f3f1d07
bac4af4451acd4323d13bcdc2b710afa1f26b0db
91078e10f1923c8a4aad8198110d8ad556783b856fa212d16b68692f16a4242f
GET /pods/PodHandler.ashx?action=GetSnappedDownloadLink&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-. HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: 516216ca-83bf-4765-8424-0515a28d8233
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 252
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 516216ca-83bf-4765-8424-0515a28d8233
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: *
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 3867b232-99fb-4298-873e-c0ec042de79f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: AM4PEPF0002D704
lastpodeditcompleteutc: 01/01/001 00:00:00.000
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_wordcapacity_4,afd_excelslicetest
x-msedge-ref: Ref A: DF1367C225C444D389D94A202809C43D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:24Z
date: Thu, 25 Apr 2024 04:00:24 GMT
X-Firefox-Spdy: h2
augloop.office.com/
0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://powerpoint.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C8WZPPsIIgXiFLxmBP+amA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/2 200 OK
date: Thu, 25 Apr 2024 04:00:24 GMT
server: Kestrel
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-origin: 7BD084C623F9E70360B8BA4050922FDE716EDB503F6EC0F5E44FB692C700FB39
x-rp-instance: _D2Worker_227
x-rp-routeid: v2Route
x-rp-clusterid: BackendMastermindMain
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=c4097c7f-3bad-48fe-b860-415ca8819e9d&waccluster=PNL1&Iid=mst2147483648%2Flyt2147483649%2Fsldw960%2Fsldh540%2Fsl&Iid=mst2147483648%2Flyt2147483649%2Fth
1.1 kB URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=c4097c7f-3bad-48fe-b860-415ca8819e9d&waccluster=PNL1&Iid=mst2147483648%2Flyt2147483649%2Fsldw960%2Fsldh540%2Fsl&Iid=mst2147483648%2Flyt2147483649%2Fth
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 609355a7839588ee9fbe520e7687cdd5
abc82faec680e60af4611aa38222613cd9760e6a
1bdb8c038ed0e40a6132fe8a3708e25b44eeef66073524125c6c24bafac69925
GET /pods/images.ashx?si=undefined&action=c4097c7f-3bad-48fe-b860-415ca8819e9d&waccluster=PNL1&Iid=mst2147483648%2Flyt2147483649%2Fsldw960%2Fsldh540%2Fsl&Iid=mst2147483648%2Flyt2147483649%2Fth HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: c7abe0d7-88ce-4ce1-96a6-9442662fe78d
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1127
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "56935061"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c7abe0d7-88ce-4ce1-96a6-9442662fe78d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: e502a057-8c90-47c8-b095-1376a6f3503f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: D68FB44B26E349E08A6484EF82242C6B Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:25Z
date: Thu, 25 Apr 2024 04:00:24 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=2f017e80-d173-4af6-bcaf-18d38476e492&waccluster=PNL1&Iid=sid265%2Fcid992504772%2Fsldw960%2Fsldh540%2Fver24%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=2f017e80-d173-4af6-bcaf-18d38476e492&waccluster=PNL1&Iid=sid265%2Fcid992504772%2Fsldw960%2Fsldh540%2Fver24%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash fca683389a4865c861346da6f409b27e
fc6e8d85644a2c0cb88cf0b040ba6a44dd551f81
bebbb8adbf50627566e20035f9db57abb99b2d36c373aa90b062d76babe49510
GET /pods/images.ashx?si=undefined&action=2f017e80-d173-4af6-bcaf-18d38476e492&waccluster=PNL1&Iid=sid265%2Fcid992504772%2Fsldw960%2Fsldh540%2Fver24%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 20eec6d7-9434-4d4c-8cfe-2ff52c665c93
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "39509153"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 20eec6d7-9434-4d4c-8cfe-2ff52c665c93
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 011ede57-5596-409b-858c-240c3bcc2ac8
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 69C320A6242749B3984639343AC5180D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:25Z
date: Thu, 25 Apr 2024 04:00:24 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 510dfe7b-1740-4e00-b352-67764731859a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:25 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 34727371-ae7b-4de8-b84c-7023b9d0c066
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 20749
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 34727371-ae7b-4de8-b84c-7023b9d0c066
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 6f4ebe12-9cbe-48d3-b8e9-e542d86d8472
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:25 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=27ce2c78-3817-414b-8157-618f8943685c&waccluster=PNL1&Iid=sid266%2Fcid1422257492%2Fsldw960%2Fsldh540%2Fver25%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=27ce2c78-3817-414b-8157-618f8943685c&waccluster=PNL1&Iid=sid266%2Fcid1422257492%2Fsldw960%2Fsldh540%2Fver25%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 97dde9d08821148a26feaa478ce8124a
fd556144fd5925a8bc1fd1bdb518d54b25e7155b
0c581ce2c74a4d03304ccc925059f6015787f4feef8e7683d4b9fd968d4ee3ae
GET /pods/images.ashx?si=undefined&action=27ce2c78-3817-414b-8157-618f8943685c&waccluster=PNL1&Iid=sid266%2Fcid1422257492%2Fsldw960%2Fsldh540%2Fver25%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 687ff392-d719-44e2-a3e9-0dc473bb8404
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "12879424"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 687ff392-d719-44e2-a3e9-0dc473bb8404
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 44d97123-41ef-407e-a920-e288643dd789
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: CE5E00F053E74F8298743BC9E8C249BD Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:26Z
date: Thu, 25 Apr 2024 04:00:25 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: cb9e158c-2b81-408b-9393-f2696aae8295
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:26 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: b281c627-5323-4b51-8850-26f4eca9afb8
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 15614
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b281c627-5323-4b51-8850-26f4eca9afb8
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: ce3dc7e0-eb1c-498f-a4bb-8b1ac2f6d574
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:26 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=0a4f7e8a-70b3-4fb6-8620-2598ba569cc8&waccluster=PNL1&Iid=sid267%2Fcid2963123267%2Fsldw960%2Fsldh540%2Fver26%2Fsl
477 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=0a4f7e8a-70b3-4fb6-8620-2598ba569cc8&waccluster=PNL1&Iid=sid267%2Fcid2963123267%2Fsldw960%2Fsldh540%2Fver26%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 517e3841cc16be654d4ac9274702b9fe
35814fa047777b8522cd0fef23fa890237eed32c
5884a6b45d98eb4aeb2d168b7a2beaea3a42727b9b8a92aae07180672c3a39a3
GET /pods/images.ashx?si=undefined&action=0a4f7e8a-70b3-4fb6-8620-2598ba569cc8&waccluster=PNL1&Iid=sid267%2Fcid2963123267%2Fsldw960%2Fsldh540%2Fver26%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 04754611-e812-45b8-980a-4358303125ad
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 477
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "61661879"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 04754611-e812-45b8-980a-4358303125ad
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 61c6fb24-02f5-43de-b70d-641aa64bd820
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: BFEC970B0AC64C92800B3CC5AFE750EE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:27Z
date: Thu, 25 Apr 2024 04:00:26 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: d03c669e-8732-4a95-9bc2-20049db800f2
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:27 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 946cd798-2d87-424a-9ee1-c3a69eefa1dd
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 13762
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 946cd798-2d87-424a-9ee1-c3a69eefa1dd
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: a47a8ae6-cb65-4dca-8ecd-46c8ea018dff
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:27 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=1dcf779d-8980-479e-bfff-d66f56cb7db9&waccluster=PNL1&Iid=sid268%2Fcid3968187389%2Fsldw960%2Fsldh540%2Fver27%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=1dcf779d-8980-479e-bfff-d66f56cb7db9&waccluster=PNL1&Iid=sid268%2Fcid3968187389%2Fsldw960%2Fsldh540%2Fver27%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 65f4b08ba04de4b6735d682db8b8364e
36f734f16b1d43eeb7bb5a8d7b9b067297e6d88c
ee97bfe030c579c9d1153d4f4eefdc54a08ee3f00d5d9e2c377398a6344fadb9
GET /pods/images.ashx?si=undefined&action=1dcf779d-8980-479e-bfff-d66f56cb7db9&waccluster=PNL1&Iid=sid268%2Fcid3968187389%2Fsldw960%2Fsldh540%2Fver27%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: e265ead8-57eb-465a-82ef-b24f293b410b
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "38989498"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e265ead8-57eb-465a-82ef-b24f293b410b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ee95c8ba-48a1-43c0-b2b0-36a693e6f567
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 1AEDD2698F074F2BA1E43A1BA5ACC09A Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:28Z
date: Thu, 25 Apr 2024 04:00:27 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 51116c41-cb05-4d26-b97e-5af3455f2e66
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:27 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: ec6af457-931a-4f18-90cd-348430b1f66d
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 13201
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ec6af457-931a-4f18-90cd-348430b1f66d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 717cd9b5-58e5-4672-b874-6d0ec79ad8f6
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:27 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=96531657-6495-4843-8e38-6b2237e94686&waccluster=PNL1&Iid=sid269%2Fcid2247966743%2Fsldw960%2Fsldh540%2Fver28%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=96531657-6495-4843-8e38-6b2237e94686&waccluster=PNL1&Iid=sid269%2Fcid2247966743%2Fsldw960%2Fsldh540%2Fver28%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 775347da18176afe34094e99f780445a
c0ff2f6ce9ca9fc85c58b021b1f1cfafc61b3845
0e3108148bb7bbc1499dce664497812008bc05175b9344b392dd9988a6a126e3
GET /pods/images.ashx?si=undefined&action=96531657-6495-4843-8e38-6b2237e94686&waccluster=PNL1&Iid=sid269%2Fcid2247966743%2Fsldw960%2Fsldh540%2Fver28%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 27e1e8a8-9ed4-4eb8-8eb0-774fa2bb6ec4
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "62837854"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 27e1e8a8-9ed4-4eb8-8eb0-774fa2bb6ec4
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 9917bf2f-c062-4532-857e-f930e9da46b8
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6AEA2D50EB394CBCB32FDBE866B31E18 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:29Z
date: Thu, 25 Apr 2024 04:00:28 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/afhs/AppPrefetchResources.ashx
1.6 kB URL powerpoint.officeapps.live.com/afhs/AppPrefetchResources.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c44809783af6d6981b8505b23e87c760
e8a0114bdf7f662177cfc5bb4f8277edd05dd5f0
38b9b1793941bfda47c4044e2b84c78bb8d295cb40579c41fd45a707b4048e8a
POST /afhs/AppPrefetchResources.ashx HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
platform: Web
X-CorrelationId: e93a50d6-6a32-4760-a3f7-4e073d9d32e3
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 989
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265;Path=/;Domain=powerpoint.officeapps.live.com; samesite=none; secure
x-correlationid: e93a50d6-6a32-4760-a3f7-4e073d9d32e3
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75E
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: X-OfficeVersion, X-CorrelationId, X-OfficeFE
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
x-officefd: AM4PEPF0002D4E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E41F85D404764761883CD1AF6F811E7E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:29Z
date: Thu, 25 Apr 2024 04:00:29 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 7e1e82ad-764c-4520-8fe2-e8958ca99e20
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 18831
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 7e1e82ad-764c-4520-8fe2-e8958ca99e20
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 5ecf319d-5cfe-4c15-9bcd-1e20291614fd
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:30 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=155d6840-2982-4fc4-8f7d-f75cf364c979
129 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?action=155d6840-2982-4fc4-8f7d-f75cf364c979
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c93aca009056615fc31597f339a98f37
4ff2768a979d0d9b80a7b43c34d07abb28696053
e4a170bb7d9c4580bb759e23bcee7506b485cb6c26fcf8f40ddd827dcfeccab4
POST /pods/PowerPoint.ashx?action=155d6840-2982-4fc4-8f7d-f75cf364c979 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-LastPodRCLocation: AM4PEPF0002D704
X-CorrelationId: 2fb7d8ba-f202-48a5-8da5-230cbb175680
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 152
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 129
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2fb7d8ba-f202-48a5-8da5-230cbb175680
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 92db55b2-5b5b-4ebe-8504-59c32ae5b816
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7FE58F12923B485EA278C46B3E8C6B0D Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:30Z
date: Thu, 25 Apr 2024 04:00:29 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=ebb57a80-3497-466a-b7b8-cd9f42630922&waccluster=PNL1&Iid=sid272%2Fcid1202304993%2Fsldw960%2Fsldh540%2Fver29%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=ebb57a80-3497-466a-b7b8-cd9f42630922&waccluster=PNL1&Iid=sid272%2Fcid1202304993%2Fsldw960%2Fsldh540%2Fver29%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c5ed5cee0439bf98c490ee82f3d724c5
9f5476fbc9aa117fe28813cec097611af68a9d42
a7c29d20ac1048132f576939a9dd092771454c95eb8c54c4d9ec7e7df874d5ba
GET /pods/images.ashx?si=undefined&action=ebb57a80-3497-466a-b7b8-cd9f42630922&waccluster=PNL1&Iid=sid272%2Fcid1202304993%2Fsldw960%2Fsldh540%2Fver29%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: bd6f4eea-7b14-4897-92cb-7bcb69a9226a
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "46383117"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bd6f4eea-7b14-4897-92cb-7bcb69a9226a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: af5882c4-7b43-42a9-9cb6-500b105ba357
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2EFD85086EC84F74BB12074B26E219B0 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:30Z
date: Thu, 25 Apr 2024 04:00:29 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: f8a262d1-f9bf-4297-8cef-abf96edcbe7c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:30 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 972e36b9-66f9-4c37-a9d0-6f29f79039f1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 14917
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 972e36b9-66f9-4c37-a9d0-6f29f79039f1
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 2f7ab88d-e45b-4d9a-9fb8-02175cf8d1d0
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:30 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=672bc430-ae08-4f41-9cf9-28102f324047&waccluster=PNL1&Iid=sid276%2Fcid358367739%2Fsldw960%2Fsldh540%2Fver30%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=672bc430-ae08-4f41-9cf9-28102f324047&waccluster=PNL1&Iid=sid276%2Fcid358367739%2Fsldw960%2Fsldh540%2Fver30%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash f96e0caeb262f6860241a20b123cb1b6
922f9cf838004586a079a739e19edf99e0693504
0b264c793275d3934b008db1873fc9af72f4dda5d43b425bcfd2cc56377a74cf
GET /pods/images.ashx?si=undefined&action=672bc430-ae08-4f41-9cf9-28102f324047&waccluster=PNL1&Iid=sid276%2Fcid358367739%2Fsldw960%2Fsldh540%2Fver30%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 1e7e727e-7897-4d6d-aa79-09a5a915ae57
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "19242725"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1e7e727e-7897-4d6d-aa79-09a5a915ae57
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: ca016eb1-fd80-445c-ba33-b9831dfb7243
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 30133A87A78A4AE49A13F3C78A223F50 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:31Z
date: Thu, 25 Apr 2024 04:00:30 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
24 kB URL res-1.cdn.office.net/officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 77c9684211102d592d9c2e042c24dade
0a03c6b4e4ed441d584c28de29ec78b797ed2792
bcd659260529ea730ba14b8ae4455f7e8bd97ca98fc262ca89a21563d33da58c
GET /officeonline/pods/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23700
last-modified: Fri, 19 Apr 2024 01:22:50 GMT
x-ms-request-id: 31f4a5e3-301e-0038-43f9-915b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:31 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370761442,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017631.16195ee2&TotalRTCDNTime=2&CompressionType=br&FileSize=23700"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css
200 OK 2.3 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (2915), with CRLF line terminators
Hash 05a4bfcc7172f3aa5b7e128d848b2ed4
8d82e6c894314b4be33c038ca1e3e993dccec019
60d78c78e38fec8aa80243e18053e53a92216e953b2e3d4ab1fb97f865e16149
GET /officeonline/pods/s/h60D78C78E38FEC8A_PptResources/1033/FabricFontIcons/fabric-icons-back-inline.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2268
content-type: text/css
last-modified: Mon, 22 Apr 2024 17:50:57 GMT
x-ms-request-id: 959ec796-301e-005a-2ce0-949970000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:31 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370761457,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017631.16195ef1&TotalRTCDNTime=2&CompressionType=br&FileSize=2268"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/hA1B554E98DA5D567_resources/en-US/clientManifest.exp.js
23 kB URL res-1.cdn.office.net/officeonline/pods/s/hA1B554E98DA5D567_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (64239), with no line terminators
Hash 0df9e98fb4be897def11904855940702
9c83dd02a8e8717d8cad926a015bd630d54a7d7a
a1b554e98da5d5677be389c62b7cd78a635cc535add01ad08b5496bcd7264bba
GET /officeonline/pods/s/hA1B554E98DA5D567_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22593
last-modified: Sun, 21 Apr 2024 06:08:48 GMT
x-ms-request-id: 7240c3f5-701e-0029-49d9-93c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:31 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370761458,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017631.16195ef2&TotalRTCDNTime=2&CompressionType=br&FileSize=22593"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: f5eec5e3-e70a-4887-84f1-68223d147587
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:31 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: a7ac8d56-0d6e-4681-a3ce-b913e709ce5b
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 18522
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: a7ac8d56-0d6e-4681-a3ce-b913e709ce5b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: df1ffd83-e980-4ec2-8067-4b792c3788bd
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:31 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3a65c84a-a708-44ef-a2a8-a55b487fa834&waccluster=PNL1&Iid=sid274%2Fcid1148140535%2Fsldw960%2Fsldh540%2Fver31%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=3a65c84a-a708-44ef-a2a8-a55b487fa834&waccluster=PNL1&Iid=sid274%2Fcid1148140535%2Fsldw960%2Fsldh540%2Fver31%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 91f72d5b685c76f5b4612a545b18759d
e113305c52318fbd41292a93a57afc6baf3f4331
2dba88907f5767ce92abd8d4bb7f9a4da9fd0d82263f9ff6b3ad816318027dd5
GET /pods/images.ashx?si=undefined&action=3a65c84a-a708-44ef-a2a8-a55b487fa834&waccluster=PNL1&Iid=sid274%2Fcid1148140535%2Fsldw960%2Fsldh540%2Fver31%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 47eac254-4fb6-457b-85ae-8c96dc73bdaf
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "49907772"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 47eac254-4fb6-457b-85ae-8c96dc73bdaf
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6AC
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f78be212-bad2-4a14-a80c-74fb26ad0697
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6AC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 5239715D4F024D76BAF027C49A76E19C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:32Z
date: Thu, 25 Apr 2024 04:00:31 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 8b2b540e-dfe1-4775-9f7a-ea81094de062
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:32 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 39bbaaeb-4c1a-4650-9222-e7deb5a9a90e
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 1575
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 39bbaaeb-4c1a-4650-9222-e7deb5a9a90e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 566667fc-b7d6-4d20-8f65-30612e591ff8
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:32 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=c6976b23-8385-4a3a-ac19-48e633add697&waccluster=PNL1&Iid=sid275%2Fcid2896187887%2Fsldw960%2Fsldh540%2Fver33%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=c6976b23-8385-4a3a-ac19-48e633add697&waccluster=PNL1&Iid=sid275%2Fcid2896187887%2Fsldw960%2Fsldh540%2Fver33%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 70dd24a97a320dbe33497d427fa407fa
b7f97c08b321e9f4d58ae90533aee0bebf7cc790
611c6d0017b43e396a8501181d3d4d2fbc3bfa151ebc8f4bed6e8aad57063b0e
GET /pods/images.ashx?si=undefined&action=c6976b23-8385-4a3a-ac19-48e633add697&waccluster=PNL1&Iid=sid275%2Fcid2896187887%2Fsldw960%2Fsldh540%2Fver33%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 70e1bf9e-5260-444b-ada0-1f7f047fdb52
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "9959393"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 70e1bf9e-5260-444b-ada0-1f7f047fdb52
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D694
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: fb4dede6-ec5e-4058-a210-4b9f836162a1
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D694
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: 5E98994DE36E4F73B7C032944150C875 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:33Z
date: Thu, 25 Apr 2024 04:00:32 GMT
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
0 B URL common.online.office.com/suite/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 625
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=7a0f188831cd9fea51b53b5d3d8dc923155afecb4bc4a286819b8047be6aa43c;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 01b0f49f-1b3a-4007-b2b9-b9d3a4a1bb83
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75D
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4EA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 61C298C2CABB4E529B25B3ED8AEAC789 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:33Z
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1577
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=b6284758b3d0db8d75752a40bf6cf6a6372cc1e2f7515f6a6649df417e6e1b96
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2d62d036-e96f-4f67-a849-58b264b8a244
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D756
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4F2
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F472CF6C1C274A3CB0FACC592E00AA6F Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:33Z
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js
4.7 kB URL res-1.cdn.office.net/officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (16861), with no line terminators
Hash 204f32119407fc2c32dc46dd9f4fc4d0
256a4f6ed80fee3f1a4e9891a0d965509665e52b
9278a7018cd2143f8dcc6ae1c4d69ddd4eb2c1cb3bba599f08f816c6b3ead3bb
GET /officeonline/pods/s/h9278A7018CD2143F_App_Scripts/jSanityCompat.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4705
last-modified: Sat, 20 Apr 2024 10:20:02 GMT
x-ms-request-id: 50101c63-701e-004b-0f35-9303c4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:33 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370768526,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017633.16197a8e&TotalRTCDNTime=2&CompressionType=br&FileSize=4705"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css
200 OK 76 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css
IP
ASN #20940 Akamai International B.V.
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (36135), with CRLF line terminators
Hash fc3687b9c1d998a396e384a6f5c42dd1
a756fe2b29dfb1da2c14f0e6fd216fc7fd5ed6ed
27d7bd6a83ab42fb97b47ed1e531cea5821e2841ab364392c2ff601c51d78d84
GET /officeonline/pods/s/h27D7BD6A83AB42FB_PptResources/1033/Hermes.refresh.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76469
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:33:50 GMT
x-ms-request-id: a00c1ee0-e01e-0004-1151-967290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:33 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370768535,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017633.16197a97&TotalRTCDNTime=2&CompressionType=br&FileSize=76469"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
powerpoint.officeapps.live.com/pods/AppSettingsHandler.ashx?app=PowerPoint&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=20240421.7
2.1 kB URL powerpoint.officeapps.live.com/pods/AppSettingsHandler.ashx?app=PowerPoint&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9aef5c468cc0f75c6b6d5c37456cd045
23955edcda54ed3d6e18a0106ee41f69a6e6fd51
57fee7662f709ba6c817b356f82fac38cdf90d19119a8200dd2a474da2e0ef37
GET /pods/AppSettingsHandler.ashx?app=PowerPoint&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=20240421.7 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2124
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 881d30e4-4969-4e6c-b495-d62d9e4c539c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D704
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 07d88552-f77d-4778-b180-ee6751263e30
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-content-type-options: nosniff
x-officefd: AM4PEPF0002D704
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7124311C469943678DE7B30814D205E7 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:33Z
date: Thu, 25 Apr 2024 04:00:33 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 9e5e6398-6904-4107-bad1-8c7873fcfc11
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 2fc08184-c240-417e-ad85-97d1592aa52d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 86eb032f-68bb-4c26-9264-c03161315cb9
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 23236
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 86eb032f-68bb-4c26-9264-c03161315cb9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: cc594e69-3035-43a1-9e98-154fbbed38c2
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: ac102221-aac0-4c08-8f66-6c5f087a0f4b
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 1955
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ac102221-aac0-4c08-8f66-6c5f087a0f4b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: f5745cb3-1891-4919-a85a-76a4b7a1fafe
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:33 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=be5ba03d-9fe9-4e4f-bf6c-7afbc30039b4&waccluster=PNL1&Iid=sid270%2Fcid2662389428%2Fsldw960%2Fsldh540%2Fver34%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=be5ba03d-9fe9-4e4f-bf6c-7afbc30039b4&waccluster=PNL1&Iid=sid270%2Fcid2662389428%2Fsldw960%2Fsldh540%2Fver34%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 7141d445489fe1a3416a7c3e31be1da0
49121511d0824236e14356a5cf48f65fb49b76e7
6c6b709e46ff091e43906478975dc79cd059badc25bec0bf68aeb7e6fb6a2c7f
GET /pods/images.ashx?si=undefined&action=be5ba03d-9fe9-4e4f-bf6c-7afbc30039b4&waccluster=PNL1&Iid=sid270%2Fcid2662389428%2Fsldw960%2Fsldh540%2Fver34%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: d5f32d0b-b839-4bdf-8c7e-fca0156034fe
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "51766304"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d5f32d0b-b839-4bdf-8c7e-fca0156034fe
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6E5
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: eb2e3ff4-78da-4322-9e92-8b5170950742
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 83F1522A9A0443FBBE3700B93B6BA9C0 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:34Z
date: Thu, 25 Apr 2024 04:00:34 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 04:00:34 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=cd42bc47-3524-4ce3-9fcf-8d5e04cd16d9&waccluster=PNL1&Iid=sid277%2Fcid1110281410%2Fsldw960%2Fsldh540%2Fver35%2Fsl
479 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=cd42bc47-3524-4ce3-9fcf-8d5e04cd16d9&waccluster=PNL1&Iid=sid277%2Fcid1110281410%2Fsldw960%2Fsldh540%2Fver35%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 0a250192ea0bb7ecb149c0a7b2dbc1cf
82046d88270dfdbfbd4b2cc0a9801f1fcd6f2a50
937ef3affbbc724db68a99198c8aa42eebe3d28ec397009cdffbdf75ca9278df
GET /pods/images.ashx?si=undefined&action=cd42bc47-3524-4ce3-9fcf-8d5e04cd16d9&waccluster=PNL1&Iid=sid277%2Fcid1110281410%2Fsldw960%2Fsldh540%2Fver35%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: 34af14a7-63cd-44cb-b5c1-fcac0d23ec2b
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 479
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "8412274"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 34af14a7-63cd-44cb-b5c1-fcac0d23ec2b
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 67b63e49-47f2-4439-89f7-94713c4eeb62
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 057061821EE64E08847640C365AD2E30 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:35Z
date: Thu, 25 Apr 2024 04:00:35 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
200 OK 24 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D6aef5b58a6df4e17ac078f01bed42b35%26HASH%3D6aef%26LV%3D202404%26V%3D4%26LU%3D1714017607864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714017635112
time-delta-to-apply-millis: 2514
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3078
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=6aef5b58a6df4e17ac078f01bed42b35&HASH=6aef&LV=202404&V=4&LU=1714017607864; MS0=d7daa0e3847143a583a4991f87e14017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 49
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 04:00:34 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h7E1062D2BAECF568_PptScripts/ppteditDS.precore.js
29 kB URL res-1.cdn.office.net/officeonline/pods/s/h7E1062D2BAECF568_PptScripts/ppteditDS.precore.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (690)
Hash bc19b8eeb318fe10742c8efcadee1855
33be5020338345ce3f727dfd2240e4586f2c0398
7e1062d2baecf5681a68c0f1b829101118cf53942ebea50a6b8baecd173af7eb
GET /officeonline/pods/s/h7E1062D2BAECF568_PptScripts/ppteditDS.precore.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29398
last-modified: Sun, 21 Apr 2024 05:57:15 GMT
x-ms-request-id: 357c63a0-201e-0046-60d9-93cb10000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:35 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370776063,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017635.161997ff&TotalRTCDNTime=2&CompressionType=br&FileSize=29398"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css
3.2 kB URL res-1.cdn.office.net/officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF, LF line terminators
Hash bcf7eeae02732aeb91853c17b36b1fe6
3419ab619ead7a239a7201124165cd79776df5f2
0d7225f4e791eddbd67465e8ec91e3b0e825b0bbd3ce555f295330e94875723a
GET /officeonline/pods/s/h0D7225F4E791EDDB_PptResources/1033/PPTGridComponent.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3243
content-type: text/css
last-modified: Sun, 21 Apr 2024 06:00:44 GMT
x-ms-request-id: 1aeb621f-c01e-0013-7dae-95db9b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:35 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370776072,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017635.16199808&TotalRTCDNTime=2&CompressionType=br&FileSize=3243"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: a1c8e7ab-1264-4ff9-bc62-5f8c70537f6f
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:35 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 6df731f2-9bd4-4bbd-bb86-32fbe19412d5
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 14769
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 6df731f2-9bd4-4bbd-bb86-32fbe19412d5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: d4a9e36d-c9a7-427d-a01d-c067264447b5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:35 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: f8266118-5b65-4811-baaa-0048bf8f932d
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:35 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=faf9b664-b19e-4968-b3b6-bff15a031641&waccluster=PNL1&Iid=sid278%2Fcid2175075300%2Fsldw960%2Fsldh540%2Fver36%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=faf9b664-b19e-4968-b3b6-bff15a031641&waccluster=PNL1&Iid=sid278%2Fcid2175075300%2Fsldw960%2Fsldh540%2Fver36%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d4eeb5da16e27b9ae07cb182e46d265a
884cd148515bdbdb6a1a44abe6c6967bfeb494a0
b5c9a08be938d27b04a46bf009a5225b5ad20980255c2680d48ff0df3ef5f465
GET /pods/images.ashx?si=undefined&action=faf9b664-b19e-4968-b3b6-bff15a031641&waccluster=PNL1&Iid=sid278%2Fcid2175075300%2Fsldw960%2Fsldh540%2Fver36%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: d69ce751-1af4-4d07-a8e3-5916e56404e5
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "39744404"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d69ce751-1af4-4d07-a8e3-5916e56404e5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6C6
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 88a284ac-ec66-4648-8048-824716a6ab42
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_visioslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 3D5E617D8EE54236A91DE6FFE45AFEFE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:36Z
date: Thu, 25 Apr 2024 04:00:36 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 5569a6af-b2b9-4bf1-a39e-2aa2cf24f1a3
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 12786
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 5569a6af-b2b9-4bf1-a39e-2aa2cf24f1a3
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 8b5f1d83-f892-4b6d-9285-419980063fd5
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:35 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=fa7ee682-6d7b-4c1e-a9f7-85ab25649d26&waccluster=PNL1&Iid=sid279%2Fcid3577565198%2Fsldw960%2Fsldh540%2Fver37%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=fa7ee682-6d7b-4c1e-a9f7-85ab25649d26&waccluster=PNL1&Iid=sid279%2Fcid3577565198%2Fsldw960%2Fsldh540%2Fver37%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 3594c185bd8aa04b8bfadfbb674863c2
d05913c470a1cba1a8577306a22ee16a59b0a810
9e2ac54d21d16d6f3d7f47d18604623539e9dc75a73a8a8ab7b2f91bf770271d
GET /pods/images.ashx?si=undefined&action=fa7ee682-6d7b-4c1e-a9f7-85ab25649d26&waccluster=PNL1&Iid=sid279%2Fcid3577565198%2Fsldw960%2Fsldh540%2Fver37%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: b17a5031-5504-4663-a31c-3b4fdf09458e
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "9386516"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b17a5031-5504-4663-a31c-3b4fdf09458e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 7a95f6f7-cc62-4e59-bdd5-bc2c1d91bfc9
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0E84A3E0CEEE40E68F170DF07AE764AE Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:37Z
date: Thu, 25 Apr 2024 04:00:37 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/h1A12CE6700E16BFE_PptScripts/wp5/appChrome.min.js
94 kB URL res-1.cdn.office.net/officeonline/pods/s/h1A12CE6700E16BFE_PptScripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 06eeec8cc2c494c1f04e267690f96075
818128242bde222b15c47390dcc1216d7558bd2f
1a12ce6700e16bfea53ab4abc21168b0d73d5cc68e3286a8b355d09cf74da18d
GET /officeonline/pods/s/h1A12CE6700E16BFE_PptScripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 94245
last-modified: Sun, 21 Apr 2024 05:59:00 GMT
x-ms-request-id: 1073d9bd-501e-005c-3195-94aacf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:37 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370783292,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017637.1619b43c&TotalRTCDNTime=2&CompressionType=br&FileSize=94245"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css
135 B URL res-1.cdn.office.net/officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash dba626c693106b9f35fa0768b03f4294
0e8f799026ae3636b4ee6c666b2d14b71388c282
7231d25545dcdc23dc51854c7667eadbce50a9d0e2da485f85e9aa4f906583ed
GET /officeonline/pods/s/h7231D25545DCDC23_PptResources/1033/PPTSlideShowCore.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Moz: prefetch
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 135
content-type: text/css
last-modified: Mon, 22 Apr 2024 16:35:56 GMT
x-ms-request-id: b7d4efe3-f01e-0045-4ed6-942a74000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:37 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370783305,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017637.1619b449&TotalRTCDNTime=2&CompressionType=br&FileSize=135"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 716c79a3-8d3b-4312-9d49-7594b2bec31e
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:37 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
200 OK 122 B URL POST HTTP/2 powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash a5399741a572760f854c39216189be94
dfda91cccafa062dad59c516d6ca8905d35daf1a
fcc38e2c569ab068c00410ef54ad5b32028a29893870a406514891f36cfbbf2a
POST /pops/ppt/edit.svc/jsonAnonymous/GetPopWacUpdates HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: da782a8a-ea56-4f29-b7b0-d876bdb391e5
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-DocumentSessionCluster: PNL1
X-UsePopsRole: true
X-PopsAffinityRoutingEnabled: false
X-PopSessionId: nhlagui6gsryjpuva
X-WacSessionStartTime: Thu, 25 Apr 2024 04:00:03 GMT
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmN0FgvGDLNDToBVHmp8pZouAAAAAAAAAAAAAAAAAAAAAAAAAABvBjJgxaL5XWC63yDt6CsK0
RequestTimeout: 10000
X-PodInstance: am4pepf0002d704
X-LastPodRCLocation: AM4PEPF0002D704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 740
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: da782a8a-ea56-4f29-b7b0-d876bdb391e5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 6DDFAA420BCD499E964462A73ACEDD41 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:18Z
date: Thu, 25 Apr 2024 04:00:37 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 670dc63d-b506-41a8-a83e-cb7dc2464f61
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 15532
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 670dc63d-b506-41a8-a83e-cb7dc2464f61
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: bd217d36-d350-4bf5-9987-351e6a40ca0d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:37 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=cb837b3f-2771-42af-b6b4-1a8e357e32e7&waccluster=PNL1&Iid=sid280%2Fcid2656420971%2Fsldw960%2Fsldh540%2Fver38%2Fsl
480 B URL powerpoint.officeapps.live.com/pods/images.ashx?si=undefined&action=cb837b3f-2771-42af-b6b4-1a8e357e32e7&waccluster=PNL1&Iid=sid280%2Fcid2656420971%2Fsldw960%2Fsldh540%2Fver38%2Fsl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 7a4eba127032c3a87e2c8839d2fe5ef2
fd20cb4de33dbd674ea549b389a045f7deca2a1f
6d513231d71ebd940adff05e3611b6e6c1356719dc2e0587ebb853f030bc9727
GET /pods/images.ashx?si=undefined&action=cb837b3f-2771-42af-b6b4-1a8e357e32e7&waccluster=PNL1&Iid=sid280%2Fcid2656420971%2Fsldw960%2Fsldh540%2Fver38%2Fsl HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Pid: WOPIsrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F7EEB1F25F54F8EA3!140&sc=host%3D%26qt%3DDefault&wdo=2
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-CorrelationId: d1fd6fd9-0ae8-43f8-a46e-a4eecb8c848c
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 480
content-type: application/json; charset=UTF-8
content-encoding: gzip
etag: "8903605"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d1fd6fd9-0ae8-43f8-a46e-a4eecb8c848c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CB
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 378331b6-3a6a-4106-926e-196e2e001e2c
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6CB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest
x-msedge-ref: Ref A: 789CB0B2B5D846089DB5D896AEBA65D1 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 32907d22-a4e3-43cb-bc5d-24b1aa16e6f5
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:37 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 2f1a73d6-0cb9-463c-8a9e-ab3c5e45759a
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 17165
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 2f1a73d6-0cb9-463c-8a9e-ab3c5e45759a
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 11d3f3ae-4413-4b5e-8da7-cb3c9a1f5074
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:37 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: a1d32abd-bc04-41a6-b342-7ac5582e334c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: x-browserulsbeacon,x-usersessionid
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 586
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=b6284758b3d0db8d75752a40bf6cf6a6372cc1e2f7515f6a6649df417e6e1b96
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 7c0c50da-c727-4ca6-992a-b20d3c2b69c1
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D756
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DD21
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1D07F99E7A8C4C03AE6EE055662A2A6E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://powerpoint.officeapps.live.com/
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
server: Microsoft-IIS/10.0
x-correlationid: 3a30bb57-6fa4-44b0-84bb-7f8a29f965c7
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
access-control-allow-methods: GET, POST
access-control-allow-headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
access-control-max-age: 1728000
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-BrowserUlsBeacon: [{"Index":17,"MsSinceStart":33741,"Value":"SessionExited","Type":"SessionBoundary"},{"Index":18,"MsSinceStart":33741,"Value":"https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828","Type":"Referrer"}]
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e8a15a67-b63c-4359-b556-eb44ec905930
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 0c2831f3-a7f5-4ddc-8e3e-6a0131aed6ae
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/WsaUpload.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
34 B URL powerpoint.officeapps.live.com/pods/WsaUpload.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /pods/WsaUpload.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 9686
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 34
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3e18bde9-68c9-4cfb-a4e6-536ec7d7255c
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6DF
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 378891f5-b73a-4945-845c-6c3782785f5f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-officefd: AM4PEPF0002D6DF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: ED98A326F4B2496A8BE12D1638094D70 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/ClosePopWacSession?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&X-UsePopsRole=true&X-PopsAffinityRoutingEnabled=false&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
151 B URL powerpoint.officeapps.live.com/pops/ppt/edit.svc/jsonAnonymous/ClosePopWacSession?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&X-UsePopsRole=true&X-PopsAffinityRoutingEnabled=false&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 43298d9d218655771d95c2370c8ea01b
564042503b88b8d72e4c375579bf32d6e072408b
0206a4c0a203d51a50f03c48cda1dbc8f678274e80b73088c9454fe8f85dc719
POST /pops/ppt/edit.svc/jsonAnonymous/ClosePopWacSession?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&X-UsePopsRole=true&X-PopsAffinityRoutingEnabled=false&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 564
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 151
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3b2400e7-7f40-4d33-9c2f-b0723f77b361
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D72B
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
si: seKJwCBozfUpaHR0cDovL2FtNHBlcGYwMDAyZDcyYi9wb3BzYmUvZWRpdGluZy5zdmNGMy-a9gDPSqCahazingDuAAAAAAAAAAAAAAAAAAAAAAAAAABNEvX7VCCidxw70Yvg5KpT0
ccpi: RjMvmvYAz0qgmoWs4p4A7ilodHRwOi8vYW00cGVwZjAwMDJkNzJiL3BvcHNiZS9lZGl0aW5nLnN2Yw2
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D72B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F6621F107B844260830EF3491FEBD869 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 powerpoint.officeapps.live.com/pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pods/RemoteTelemetry.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2767
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 87dd6642-2ebb-46c3-b0ed-2f0778e79d54
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D689
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: 92dc586f-bd3d-4192-9b04-e51d4141b460
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com, https://powerpoint.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D689
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: C2A6024928804B308F913B450A836FB6 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PowerPoint.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
118 B URL powerpoint.officeapps.live.com/pods/PowerPoint.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash cef1d796784239e6084ec12de2486b73
0f841aae2912713811929fa2d5bd67d4617e55d2
6c5998d9aff389aefa65744076b341b39265239b8d006d1cbf5fa47170ed4529
POST /pods/PowerPoint.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&build=16.0.17607.40507&waccluster=PNL1&WacUserType=WOPI&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449603063&PodSID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 179
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 118
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fd4516fd-7cbd-412f-b4a7-9b995befdda1
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6A1
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: d08b42f5-b3d0-4840-af1a-c7eaec667ad6
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
content-disposition: attachment
x-podinstance: am4pepf0002d704
x-content-type-options: nosniff
x-download-options: noopen
x-officefd: AM4PEPF0002D6A1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: C6C255BEED6D45B3BFA0ADADE5E2DF0C Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=d6687067-7b09-489d-be12-29f5c148e418
306 B URL powerpoint.officeapps.live.com/pods/podedit.svc/jsonAnonymous/GetUpdates?action=d6687067-7b09-489d-be12-29f5c148e418
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 16ad1e079805757ae2a4c2796800ae87
89573078c37bfde2fbc8b2d1666d5673fba23a5d
720a5f9af1d5bb9e2a202f6d92811558cb015fcf1c0ab7846f308c48a4a9396a
POST /pods/podedit.svc/jsonAnonymous/GetUpdates?action=d6687067-7b09-489d-be12-29f5c148e418 HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-CorrelationId: a85e61cb-25c5-419e-a689-d8be640fd7be
SlideWidth: 960
SlideHeight: 540
DevicePixelRatio: 1
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-WacNoAuth: 1
X-PageUrl: https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-LastPodRCLocation: AM4PEPF0002D704
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Length: 1568
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 306
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a85e61cb-25c5-419e-a689-d8be640fd7be
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D6CA
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: f1177ca9-e4e3-4b22-8e01-d9eb2fcd7253
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
x-officefd: AM4PEPF0002D6CA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: B8B0559575414D41BB5230CF79195292 Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:19Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
200 OK 0 B URL OPTIONS HTTP/2 euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-CorrelationId: 792b74ce-9667-41ca-bd33-9c0c8ecb9dab
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 60081
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 792b74ce-9667-41ca-bd33-9c0c8ecb9dab
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: e58ee17c-7e66-4461-8cf7-b1c5313f096f
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=StopRtcConnection
65 B URL powerpoint.officeapps.live.com/pods/PodHandler.ashx?action=StopRtcConnection
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 38e73b395bccbe3f61251c299746174a
dabe781bc8df66539da6954b1d3a5b6fdc08d3fe
12737e4251f3db37f239c31a81b38735492019c8efa02c4315297fe973a0708b
POST /pods/PodHandler.ashx?action=StopRtcConnection HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-xhr: 1
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
X-OfficeVersion: 16.0.17607.40507
X-WacCluster: PNL1
X-IsCoauthSession: true
PodSID: _._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.
X-CorrelationID: 1f34f893-073b-4b56-8361-6fed15759c09, a4a2beb6-c231-46ed-8765-a1eafac83df4
X-UserType: WOPI
haep: 4
X-Key: wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE=;uRBxQ4dTc/Ks9zH0GNK+IiIcnpxGfb4Qc60AwnWwPF4=,638496144095717329
X-AccessToken: 4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0
X-AccessTokenTtl: 1714449602075
Content-Type: application/x-www-form-urlencoded
Content-Length: 64
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: PowerPoint_PrefetchedVersion_Artifacts=161762040516; E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; ShCLSessionID=1714017615798_0.7176644724861362; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PNL1-ARRAffinity=849488df9ef27914191b1ee644fabfa971e4c3f663da4a10f1a3a2af711b5265
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 65
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 234f8f41-1cf5-4c5c-8d59-9016f2c017b9
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D68F
x-officeversion: 16.0.17607.40507
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
document-policy: js-profiling
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional
x-ms-request-id: b87b07a4-2292-4ecf-8da4-0472b9eda8a2
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
reporting-endpoints: default="https://powerpoint.officeapps.live.com/pods/BrowserReportingHandler.ashx"
x-podinstance: am4pepf0002d704
lastpodeditcompleteutc: 01/01/001 00:00:00.000
x-officefd: AM4PEPF0002D68F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: BF5457733FF4419C82251E832D823B4E Ref B: SVG20EDGE0115 Ref C: 2024-04-25T04:00:38Z
date: Thu, 25 Apr 2024 04:00:38 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/pods/s/hA3596C17DAD9A003_resources/1033/progress.gif
695 B URL res-1.cdn.office.net/officeonline/pods/s/hA3596C17DAD9A003_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 24 x 24
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/pods/s/hA3596C17DAD9A003_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 695
content-type: image/gif
last-modified: Fri, 19 Apr 2024 15:40:44 GMT
x-ms-request-id: b3dd3b39-401e-0022-5e71-923a88000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 04:00:38 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.39,b=370789371,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1714017638.1619cbfb&TotalRTCDNTime=3&CompressionType=&FileSize=695"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
0 B URL euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?build=16.0.17607.40507&waccluster=PNL1&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&ckey=wpYCfvCo5NtReonPVGhRzGcLrXai4DRXbyFIrZv97hE%3D%3BuRBxQ4dTc%2FKs9zH0GNK%2BIiIcnpxGfb4Qc60AwnWwPF4%3D%2C638496144095717329&haep=1 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 57786
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e62f1ed1-f70e-4288-8c2d-13cfbdc124c6
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 625c68df-959a-4fc9-aec6-249afa63c12d
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
0 B URL euc-powerpoint-telemetry.officeapps.live.com/pt/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pt/RemoteUls.ashx?usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&officeserverversion=20240421.7 HTTP/1.1
Host: euc-powerpoint-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 439
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e698d24a-3725-442a-adb8-b74d30eb9085
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
strict-transport-security: max-age=31536000
x-officefe: AM1PEPF000338A9
x-officeversion: 16.0.17615.40511
x-officecluster: PGTEU4
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
document-policy: js-profiling
x-ms-request-id: 2fdb22b3-2cd4-41ff-a0dc-3e43d53ea988
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://powerpointonline.nelsdf.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PGTEU4&FileSource="}]}
reporting-endpoints: default="https://euc-powerpoint-telemetry.officeapps.live.com/pt/BrowserReportingHandler.ashx"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode, x-newsnapurl, IsIntentional, X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000338A9
set-cookie:
date: Thu, 25 Apr 2024 04:00:38 GMT
content-length: 0
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693
404 Not Found 0 B URL GET HTTP/2 store.office.com/gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectstore.office.com
FingerprintF8:80:E4:7F:AF:AF:76:D6:E1:1C:60:13:3B:11:BC:8D:1C:08:B2:FC
ValiditySun, 31 Mar 2024 22:15:37 GMT - Wed, 26 Mar 2025 22:15:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?c2bc554f_3d0d46f8_1714017619693 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 04:00:20 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-HxMc78nVg9eAZwpqHBQN2CYy0DV/fcuL/p9tofjdHLA=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: 4c9216623981fbdbb3b27544f0898a5c
x-correlationid: 4c921662-3981-fbdb-b3b2-7544f0898a5c
x-machine: OMEXNODES000002__omexexternal-prod-weu-001_2
x-buildversion: 24.4.10415.11006
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: ad815372-f373-4618-b57d-0a7a9f6db5ce
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
powerpoint.officeapps.live.com/pops/UpdatePodsDocumentSettings.ashx?WopiSrc=https://wopi.onedrive.com/wopi/files/7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&PodsID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&PodsEndpoint=https://powerpoint.officeapps.live.com/pods/&BrowserCacheAllowed=
0 B URL POST powerpoint.officeapps.live.com/pops/UpdatePodsDocumentSettings.ashx?WopiSrc=https://wopi.onedrive.com/wopi/files/7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&PodsID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&PodsEndpoint=https://powerpoint.officeapps.live.com/pods/&BrowserCacheAllowed=
IP
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pops/UpdatePodsDocumentSettings.ashx?WopiSrc=https://wopi.onedrive.com/wopi/files/7EEB1F25F54F8EA3!140&access_token=4whsZVg_RfrqbDEb3We1eKC2c7nqUbtUrg-V9IIxT_EZIEWouIwrC8sl2CHP9gYjO-ni0K1Uv-ArWpDyqmA_dislduKJkO_FjvmGyXyu01R8jjB5-KmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu-oeCc7AuLU0&access_token_ttl=1714449602075&PodsID=_._._.8f1b4378-0c66-1f07-884e-1a7874bce239-.-.-.&PodsEndpoint=https://powerpoint.officeapps.live.com/pods/&BrowserCacheAllowed= HTTP/1.1
Host: powerpoint.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
X-UserSessionId: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
200 OK 57 kB URL User Request GET HTTP/2 onedrive.live.com/edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectonedrive.com
Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A
ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File type JavaScript source, ASCII text, with very long lines (32332), with CRLF, LF line terminators
Hash 8279c6fde16fc3c8b674b778cba848b2
9eb6af6c436b6b1390cdf29d22770b927703a42c
6468b2da1743985fbd4e799a65d619478b3440f652deb6ae334191bab057509b
GET /edit?id=7EEB1F25F54F8EA3!140&resid=7EEB1F25F54F8EA3!140&ithint=file%2cpptx&authkey=!AMlIsPUiXyIw5jU&wdo=2&cid=7eeb1f25f54f8ea3 HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: E=P:gVITLtxk3Ig=:wktEJiBzE7IpAhQoXyNhh5vOu/CNH40+eBT6j3E20wc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 25-Apr-2024 02:20:00 GMT; path=/
wla42=; domain=live.com; expires=Thu, 02-May-2024 04:00:02 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 795f98b668-sdh8j
x-odwebserver: eurwesteur637265-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DDB2B0B0C46B4C5A9990F1EBD4AF2F02 Ref B: SVG20EDGE0109 Ref C: 2024-04-25T04:00:00Z
date: Thu, 25 Apr 2024 04:00:01 GMT
X-Firefox-Spdy: h2
puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613380
200 OK 22 B URL GET HTTP/2 puk1-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613380
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://powerpoint.officeapps.live.com/pods/ppt.aspx?ui=en-US&rs=en-US&hid=hyO71E0Mz0C4uEzeeQAx7g.0.0&wdo=2&wde=pptx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&newsession=1&sftc=1&uihit=editaspx&muv=1&dchat=1&wdorigin=Other&wdpodsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2Fpods%2F&wdpopsurl=https%3A%2F%2Fpowerpoint.officeapps.live.com%2F&wdoverrides=devicepixelratio:1,RenderGifSlideShow:true&filename=Presentation%20%2811%29.pptx&filegeturlbool=true&fs=80957&ro=false&fastboot=true&noauth=1&thpanel=921&sw=1004&sh=868&postmessagetoken=b2f00ab7-afa8-4d6d-bf05-c82af5b90828
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
Fingerprint09:66:CC:D9:31:FC:30:90:AB:DD:4F:75:CE:D5:DF:2B:D5:9B:45:21
ValidityFri, 12 Jan 2024 11:55:03 GMT - Mon, 06 Jan 2025 11:55:03 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ef0d4c818a7aa24d756041fe8298b181
bc4f331819dbb2266d763a19a3c0d51da47aa4f5
83465f9d68d26a6453dfd60c30ffbb0be69d9d309829550af7614377cf4818f7
GET /rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F7EEB1F25F54F8EA3%2521140%26access_token%3d4whsZVg%255FRfrqbDEb3We1eKC2c7nqUbtUrg%252DV9IIxT%255FEZIEWouIwrC8sl2CHP9gYjO%252Dni0K1Uv%252DArWpDyqmA%255FdislduKJkO%255FFjvmGyXyu01R8jjB5%252DKmsH9cW4ZnndgQkMPuvI7fyAqnpdyPL5dPmnZPZTrQ2tyaqPu%252DoeCc7AuLU0%26access_token_ttl%3d1714449603063&ClientId=%7bb2f00ab7-afa8-4d6d-bf05-c82af5b90828%7d&usid=b2f00ab7-afa8-4d6d-bf05-c82af5b90828&WacUserType=WOPI&mid=LN2PEPF00010873&ts=17140176110000000&eTag=%223909e471-0000-0500-0000-6629d54b0000%22&waccluster=PUK1&rr=UlRDLUN1cnJlbnRQcm9vZktleT1rTWlPV0JjdCUyZnNIQ044bmozYVI1Z0xrUiUyZjB6eG8lMmZoa21oJTJmbkVNVWFoN1UlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDAxNzYwNzI1MTg1ODgmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9TkFNJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=3&UserType=1&UserVersion=16.0.17607.40507&corrid=3dcce4cd-c541-481c-9cbc-e788d5ee1ffe&connectionToken=_eeqpV-fb_Hd0Se5wYaNrg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714017613380 HTTP/1.1
Host: puk1-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://powerpoint.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://powerpoint.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:R74cLtxk3Ig=:O9tfaDI2vCb7IaEpV+Jk/wmvog1+24jxJYqwFbre7nc=:F; xid=684581f6-bb05-4fe3-b661-ed9186422b54&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PUK1
x-frontend: RtcNetCoreLB1
x-machinename: LN2PEPF00010873
x-userhostaddress: 91.90.42.0
x-correlationid: 3dcce4cd-c541-481c-9cbc-e788d5ee1ffe
x-usersessionid: b2f00ab7-afa8-4d6d-bf05-c82af5b90828
x-officefe: LN2PEPF00010873
x-officeversion: 16.0.17609.41019
x-officecluster: PUK1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://powerpoint.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: LN2PEPF00010873
rtcsessionid: f28d16e0-fdcd-4415-b153-0a3bd2fb28c1
x-officertcproxy: LN2PEPF00010851
date: Thu, 25 Apr 2024 04:00:17 GMT
X-Firefox-Spdy: h2
13.107.42.12
13.105.28.32
52.108.50.37
23.36.79.43
13.69.239.74
52.111.209.16
0.0.0.0
0.0.0.0