Report - sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink

Report Overview

Submitted URL
sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
IP
52.111.243.45
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-05-08 06:59:23
Access
public
Website Title
New Document Received
Final URL
sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sway.cloud.microsoft	unknown	2015-09-25	2023-07-22	2024-04-18	3.5 kB	56 kB	52.111.243.45
neu-www.sway-cdn.com	unknown	2014-07-29	2018-11-29	2024-02-28	12 kB	1.1 MB	104.66.127.98
www.sway-cdn.com	67267	2014-07-29	2014-10-07	2024-03-05	1.0 kB	115 kB	104.66.127.98

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-30	medium	sway.cloud.microsoft/	Office365
2024-04-30	medium	sway.cloud.microsoft/	Office365
2024-04-30	medium	sway.cloud.microsoft/	Office365
2024-04-30	medium	sway.cloud.microsoft/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (29)

	URL	Size	First Seen	Last Seen
	neu-www.sway-cdn.com/161762440100_Content/Common.js	1.1 MB	2024-05-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/Common.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 08:59:25 Last Seen2024-05-18 16:11:51 Times Seen11 Hash aaa0980252987a922eeba0361b1ebb6c 94bb79af19c8e32dbbc477705417ed8b440b20f4 d317583407d823e8b6d81fb522f7b0044fe17a8fa4375d33550365826ef398a0 Loading...

	unknown	87 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:51 Times Seen20 Hash 9fd9a53790b66e988e07113fee040460 d21ce3fcc5eb53ab243a949ed9d634fce26120dc 299d4e133bef00ce580ce43789ca533440527527b534936360bca720b1c94632 Loading...

	unknown	80 B	2024-02-28	2024-05-08
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-02-28 23:32:57 Last Seen2024-05-08 08:59:25 Times Seen2 Hash afb7a7f203511548a4cdf164bd43c30e 10db17c3aea396884ed91e956db4e0369cd2fdf2 c8b97dfc46f69f299676302a86d13bad56ad38dc0d42c72a9b741bbe92b3e93f Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	34 B	2023-03-08	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:50 Times Seen22 Hash 42b16afdfe82c023f26046c2db686242 f4e9d4bc57d12b5547e6739b950764c41948a6a9 91c6538d931be1326dac9d414916728b1296c42df91c2124880c6887e4789beb Loading...

	unknown	20 B	2023-07-03	2024-05-18
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen23 Hash 34ecd041fdf0b33410ca12ba9a717346 9bb59214b68f0ad82a7f2615de911536a028f6d1 65c62889fd18a85ba658016620d803b3943ee0f873ff3a8bae45751bef97dd35 Loading...

	neu-www.sway-cdn.com/161762440100_Content/common_raw.js	24 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/common_raw.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen50 Hash 16596d4249f021d9b71bb5caddb7cc3b 7d3f469ccef320e01ecd9c601e80ef5192326869 aa26cfe55e8cd183738f42180aae291dd666f4d39062e8a44c97b0be021946ef Loading...

	neu-www.sway-cdn.com/Content/modernizr-3.3.1-custom.js	7.9 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/Content/modernizr-3.3.1-custom.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen52 Hash f299dc10bcddd2e7808b978b3de18936 d8273fb0282bfa670f554e45f8ae7b1f73ec8071 160daca799b276d8ce387e0187d972d715abead1399795bff9ec2a64b494527c Loading...

	neu-www.sway-cdn.com/161762440100_Content/Preload.js	18 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/Preload.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen52 Hash f070ffc5c8bde496d241e5ef6ea85ae9 9b574040fafb228cabc86c6afdb1ed87b140a3af 2f5deb75ea8a55d2119c56e4e3bcc0bde3516b838a088e28df1553824fe619ad Loading...

	neu-www.sway-cdn.com/Content/jquery-2.2.4-custom-1.js	85 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/Content/jquery-2.2.4-custom-1.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen51 Hash 338472d280d64be84d11980dd512176a 95de9f83181ac211f54bf97fd010624513a90459 5e170e2cb452c3504ff9af148cc6c4aea661178c9fc93ecdcb32bcd856d76d9b Loading...

	neu-www.sway-cdn.com/161762440100_Content/StoryPage.js	1.5 MB	2024-01-16	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/StoryPage.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-16 09:45:25 Last Seen2024-05-18 16:11:51 Times Seen32 Hash 8f0f2fb85f30e911d8be44078f392344 85167056f8c51e155e4a89ed3b28e5e58b02791f 6b4d0d07f8a0aafd09dfa3806bada144aab09704390d8c57a9a8d76f516dd349 Loading...

	unknown	80 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:51 Times Seen20 Hash 1bfac974e7d51adfa3ef11b2b30677f4 2d98f632c29923787eed3572cac67f341974f281 8aee06383b8531c58c159445dd075f51bcc7d4c21e9bfdb402b2ebe6f4752ac3 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	594 B	2023-03-08	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:50 Times Seen22 Hash 9ddbfc56db7bd9421c6578216fba8d8e 6261e5ecf63af97435d6210deea79e2d27c96506 01d39877e81c051b3be5af8281b902808cacc5c402a4df3f909fe489f17fbc32 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	2.2 kB	2023-03-08	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:50 Times Seen22 Hash c5739546e202a842ca352cb16aed28dd de8d1ea42f0306696cd216262da0a8fd399a6684 ca080b861ec07249e0c860974afecd1cc57a88889ec5d299fe9850cfe219be50 Loading...

	neu-www.sway-cdn.com/Content/jquery-ui-1.11.4-custom.js	66 kB	2023-03-14	2024-05-18
Pretty URL neu-www.sway-cdn.com/Content/jquery-ui-1.11.4-custom.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 18:03:06 Last Seen2024-05-18 16:11:51 Times Seen52 Hash 29e67338030f5091caa7f4290c2bc417 3bcdba4e5f642367cd5a42b7ecdac8ba02a01fad 3da8fc98318eeaf2ba8d02e79455d3d6f8f509bda7882c4c3c807b7197c24a1d Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	20 kB	2024-05-08	2024-05-08
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 08:59:26 Last Seen2024-05-08 08:59:26 Times Seen1 Hash e644093eab5ef176d79b6e9373cb424e 66680f9b1e914ae314b6e52102e029e4949520bc 2561b8d91032062212677ee9e0604fe221ed20672ad81225debd861cf9566826 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	282 B	2024-05-08	2024-05-08
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 08:59:26 Last Seen2024-05-08 08:59:26 Times Seen1 Hash 2ae5d5c4eb089e68ad9344a67e64e98e a1bbd197fd46a19b6da00f3d64185def51d75236 c6a1554c47e051c6a98e6caacc3a6eb81c959329ec2acfe8e9e15556b81ab1f9 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	28 B	2023-03-08	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen22 Hash b67ca97f5a9655ca0eb9b39c4e733972 52979aa1fe97a6e40022fc9bd820476d29b8ae1f dd31800d409cda21e123adb939a20284b11881904674512ed0680bb42b87e486 Loading...

	unknown	49 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen17 Hash 1e20988d901a2d6bb8701fca8f87f6dd 477f8dc152e7e2424f5612057496009edfd13294 2084300172826ad674474bf95a1949c29c6917f5193b47b7272d6fb5490cf08d Loading...

	neu-www.sway-cdn.com/Content/CommonDiagnostics-Sway-1.0.0.js	60 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/Content/CommonDiagnostics-Sway-1.0.0.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:50 Times Seen24 Hash 534d409c6390da8b66eaa3d537592ca1 838a070dea0cb4c95ae7cc5ab06ba615ab8694a0 c0b9213606d02d7590db737b84b82c499aed306985fa41a846339944b2618351 Loading...

	unknown	155 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen20 Hash b94701af39f15709666883cae7576f73 0baeceff49493caa2a319d5a2b5a582007ea49ee caef31a4f51d01c593086d127d483fb4b4ad4dbc6ae994f999c7a971b7956ced Loading...

	neu-www.sway-cdn.com/161762440100_Content/feedback/OfficeBrowserFeedback.js	162 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/feedback/OfficeBrowserFeedback.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen48 Hash 9f5dba23bbfb4e0d50ac9aa6ce998d1a 0f027b6b4fd323c708592dcde052774ca7fd5fd6 4f2d6301347a2fbf30fed521f2d319e78cffd90713336dcc9c0a2676dc3fb37c Loading...

	neu-www.sway-cdn.com/161762440100_Content/tdb.js	145 kB	2023-03-13	2024-05-18
Pretty URL neu-www.sway-cdn.com/161762440100_Content/tdb.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 01:55:40 Last Seen2024-05-18 16:11:51 Times Seen52 Hash eae96e25b7ea4f06dc2b686160f661a9 6b0daeb5c08657a9bf96d79ed859985f3da6da52 daef54c828406aaba2db8f22758177351ed4d3ce40b848bb93f45f8b253fcdfd Loading...

	neu-www.sway-cdn.com/Content/Hammer-2.0.4.js	18 kB	2023-03-08	2024-05-18
Pretty URL neu-www.sway-cdn.com/Content/Hammer-2.0.4.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen52 Hash d22d7500ab7c72da9195c571002c2495 528c2d1d834916f8a4c47191cb20d16d2f6a53d3 f2bfc0b2ffa4e26071e6d6d8b73d750f6e9f8eb4e021a8ffdb18b84af0b919a3 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	685 B	2023-03-08	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 23:03:27 Last Seen2024-05-18 16:11:51 Times Seen22 Hash 887c8ea38a57bd6bb3557ec430d06242 79a5e095589913b20ed681c713d7800752399a4a 2c8910b96ab41c0cea5f9ca45ff99e930ceccc910b55bed713323263bee85cfb Loading...

	unknown	172 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen20 Hash db0eb79036b934126c8796928a31ff27 3f0e7a8319acc9cfe9d7d369557b9fd37f751efe 7126c6cddea908a9bfe65a947043c5b881931c119a305c99ccdb2f1493b93680 Loading...

	unknown	224 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen20 Hash 43b11b37fbb7b928ed0040f24664e850 5bfe08bd897e506cb0d06ac97a8dacf4f14dc460 af1b7d60a7cef42d9717eb306e8d21af174103192340503798a2996dd7f7b109 Loading...

	unknown	80 B	2023-07-03	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-07-03 21:45:51 Last Seen2024-05-18 16:11:50 Times Seen20 Hash 1b25e3fd8fa8372d8d5ea80e991f9e87 966d627bed709ff2e839857adde6d39befe9e000 9be62ee25ff0f37f8f887bcb6c210a78aaaf34462567682f66c1ee5e89d60b67 Loading...

	sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink	132 B	2024-01-16	2024-05-18
Pretty URL sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink IP 52.111.243.45 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-16 09:45:25 Last Seen2024-05-18 16:11:51 Times Seen8 Hash a602233e63afb9b358d4d29dfdfc2958 79a712f2b2f410bdd781f997a41459ba22fddb81 9f0507b7956c982683566edfcf2c7fc858172ac8c33eabde543b38b6318393a6 Loading...

	neu-www.sway-cdn.com/161762440100_Content/en-us/Resources.js	126 kB	2024-05-08	2024-05-11
Pretty URL neu-www.sway-cdn.com/161762440100_Content/en-us/Resources.js IP 104.66.127.98 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 08:59:26 Last Seen2024-05-11 05:17:20 Times Seen5 Hash a4dbabe661737162129e9e4bb621da1c 38be9cfafb4a4be9dc5fe9b615ca7bc22cf90e1f b5b21c586d572568821d08b71fdbd06605d321706f6dc864e930dedf08c22bfa Loading...

HTTP Transactions (32)

URL IP Response Size

sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink

52.111.243.45

200 OK

41 kB

URL User Request GET HTTP/2
sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
IP
52.111.243.45:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerMicrosoft Corporation
Subjectsway.office.com
Fingerprint75:74:77:7E:17:E2:25:6C:D4:B2:4F:28:03:28:37:62:57:1B:12:95
ValidityFri, 08 Mar 2024 14:14:49 GMT - Mon, 03 Mar 2025 14:14:49 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (18048), with CRLF, LF line terminators
Size
41 kB (41304 bytes)
Hash
5dad3b388b0aac15f4cbe941bca01fd0
a28f06d9d81aa6eefed58a3dd6b5ab6e9686cb09
263d1171ed223a526a0962b2f68e2a1e76c4df326e1865ac7f28ae1c6822da76

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /lAsxBmdzUG5VXXav?ref=3DLink HTTP/1.1
Host: sway.cloud.microsoft
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-type: text/html; charset=utf-8
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: AuthSess=b1f234f0-c3fa-47c1-b806-ef8328db93d9; domain=sway.cloud.microsoft; path=/; samesite=none; secure; HttpOnly
AADNonce=ea71bb8d-df16-4e8c-a689-a5bff1262e0f.638507483354946936; domain=cloud.microsoft; path=/; samesite=none; secure; HttpOnly
x-correlationid: a7723230-abed-4d00-aac7-1cc64c37f5c4
x-usersessionid: a7723230-abed-4d00-aac7-1cc64c37f5c4
x-officefe: SwayFrontEnd_IN_1
x-officeversion: 16.0.17624.40100
x-officecluster: neu-001.www.sway.com
x-partitioning-enabled: true
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
x-content-type-options: nosniff
strict-transport-security: max-age=15724800; includeSubDomains; preload
timing-allow-origin: *
x-requestid: d7b2867e-2407-4510-ba29-0f49f54c4be7
x-trackingid: cb4b40d4-a76b-4d52-873d-3f177eadf589
x-frame-options: SAMEORIGIN
x-key: ot2DwgCNpZN73gg4bTFtZIdcTZCFcSN8Whj0xSsMCGc=,638507483349634312
x-robots-tag: noindex, nofollow
x-ua-compatible: IE=edge
x-html-minification-powered-by: WebMarkupMin
x-powered-by: ARR/3.0
date: Wed, 08 May 2024 06:58:54 GMT
content-length: 41304
X-Firefox-Spdy: h2

neu-www.sway-cdn.com/Content/jquery-2.2.4-custom-1.js

104.66.127.98

200 OK

30 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/jquery-2.2.4-custom-1.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32236), with CRLF line terminators
Size
30 kB (29703 bytes)
Hash
338472d280d64be84d11980dd512176a
95de9f83181ac211f54bf97fd010624513a90459
5e170e2cb452c3504ff9af148cc6c4aea661178c9fc93ecdcb32bcd856d76d9b

HTTP Headers

GET /Content/jquery-2.2.4-custom-1.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
Vary: Accept-Encoding
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 29703
Cache-Control: public, max-age=21299
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive

neu-www.sway-cdn.com/Content/jquery-ui-1.11.4-custom.js

104.66.127.98

200 OK

18 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/jquery-ui-1.11.4-custom.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32214), with CRLF line terminators
Size
18 kB (17891 bytes)
Hash
29e67338030f5091caa7f4290c2bc417
3bcdba4e5f642367cd5a42b7ecdac8ba02a01fad
3da8fc98318eeaf2ba8d02e79455d3d6f8f509bda7882c4c3c807b7197c24a1d

HTTP Headers

GET /Content/jquery-ui-1.11.4-custom.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 17891
Cache-Control: public, max-age=84398
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/Preload.css

104.66.127.98

200 OK

12 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/Preload.css
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
12 kB (11753 bytes)
Hash
103e03370e3023306cd2f3e4d2b8512d
dadc7d138734d2b42f978e0cd0d0383f4dd0ffd4
0f30fad32c0debda2ae7fb2816b34d4ec7da737e8fb48aaba1f3f07c21fd40a2

HTTP Headers

GET /161762440100_Content/Preload.css HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 11753
Cache-Control: public, max-age=67418
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/Content/CommonDiagnostics-Sway-1.0.0.js

104.66.127.98

200 OK

13 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/CommonDiagnostics-Sway-1.0.0.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, Non-ISO extended-ASCII text, with very long lines (2360), with CRLF line terminators
Size
13 kB (13381 bytes)
Hash
fd14998badf27d4f974ca33841c97397
d951a5fc5d3a3075e8986dba845d956a9831423e
2306ca934e2c1a52219d8a608c130f2bcdb7d859303f4ca5806cd48db0c9ae6f

HTTP Headers

GET /Content/CommonDiagnostics-Sway-1.0.0.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 13381
Cache-Control: public, max-age=84398
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/Content/modernizr-3.3.1-custom.js

104.66.127.98

200 OK

3.2 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/modernizr-3.3.1-custom.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (7649), with CRLF line terminators
Size
3.2 kB (3210 bytes)
Hash
f299dc10bcddd2e7808b978b3de18936
d8273fb0282bfa670f554e45f8ae7b1f73ec8071
160daca799b276d8ce387e0187d972d715abead1399795bff9ec2a64b494527c

HTTP Headers

GET /Content/modernizr-3.3.1-custom.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 3210
Cache-Control: public, max-age=84398
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/en-us/Resources.js

104.66.127.98

200 OK

39 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/en-us/Resources.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65491), with no line terminators
Size
39 kB (39147 bytes)
Hash
a4dbabe661737162129e9e4bb621da1c
38be9cfafb4a4be9dc5fe9b615ca7bc22cf90e1f
b5b21c586d572568821d08b71fdbd06605d321706f6dc864e930dedf08c22bfa

HTTP Headers

GET /161762440100_Content/en-us/Resources.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 39147
Cache-Control: public, max-age=34067
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/Common.js

104.66.127.98

200 OK

203 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/Common.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
203 kB (202745 bytes)
Hash
aaa0980252987a922eeba0361b1ebb6c
94bb79af19c8e32dbbc477705417ed8b440b20f4
d317583407d823e8b6d81fb522f7b0044fe17a8fa4375d33550365826ef398a0

HTTP Headers

GET /161762440100_Content/Common.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 202745
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/Preload.js

104.66.127.98

200 OK

4.2 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/Preload.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (18297), with no line terminators
Size
4.2 kB (4168 bytes)
Hash
f070ffc5c8bde496d241e5ef6ea85ae9
9b574040fafb228cabc86c6afdb1ed87b140a3af
2f5deb75ea8a55d2119c56e4e3bcc0bde3516b838a088e28df1553824fe619ad

HTTP Headers

GET /161762440100_Content/Preload.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 4168
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/tdb.js

104.66.127.98

200 OK

32 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/tdb.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
32 kB (32326 bytes)
Hash
eae96e25b7ea4f06dc2b686160f661a9
6b0daeb5c08657a9bf96d79ed859985f3da6da52
daef54c828406aaba2db8f22758177351ed4d3ce40b848bb93f45f8b253fcdfd

HTTP Headers

GET /161762440100_Content/tdb.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 32326
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

sway.cloud.microsoft/s/lAsxBmdzUG5VXXav/get?currentClientVersion=201

52.111.243.45

200 OK

9.8 kB

URL POST HTTP/2
sway.cloud.microsoft/s/lAsxBmdzUG5VXXav/get?currentClientVersion=201
IP
52.111.243.45:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectsway.office.com
Fingerprint75:74:77:7E:17:E2:25:6C:D4:B2:4F:28:03:28:37:62:57:1B:12:95
ValidityFri, 08 Mar 2024 14:14:49 GMT - Mon, 03 Mar 2025 14:14:49 GMT

File type
JSON text data
Size
9.8 kB (9842 bytes)
Hash
e2edaadee84a594deabd03a2924340e0
99baf32821cb163dc89aad07445fe9df88821b10
bac998437a974569c9403d027468eef15fc3c467b31164dbba122b2fb35b3958

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

POST /s/lAsxBmdzUG5VXXav/get?currentClientVersion=201 HTTP/1.1
Host: sway.cloud.microsoft
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-StoryId: FBH9RTwWXedlvmWuyFaS
X-LookupId: lAsxBmdzUG5VXXav
X-WebClientVersion: 201
X-UserSessionId: a7723230-abed-4d00-aac7-1cc64c37f5c4
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
X-Key: ot2DwgCNpZN73gg4bTFtZIdcTZCFcSN8Whj0xSsMCGc=,638507483349634312
Content-Length: 164
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Cookie: AuthSess=b1f234f0-c3fa-47c1-b806-ef8328db93d9; AADNonce=ea71bb8d-df16-4e8c-a689-a5bff1262e0f.638507483354946936
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-type: application/json
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 9a15b64b-ddfb-4241-9da0-6f2731ef282e
x-usersessionid: a7723230-abed-4d00-aac7-1cc64c37f5c4
x-officefe: SwayFrontEnd_IN_4
x-officeversion: 16.0.17624.40100
x-officecluster: neu-000.www.sway.com
x-partitioning-enabled: true
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
x-content-type-options: nosniff
strict-transport-security: max-age=15724800; includeSubDomains; preload
timing-allow-origin: *
x-storyid: FBH9RTwWXedlvmWuyFaS
x-lookupid: lAsxBmdzUG5VXXav
x-requestid: 8dee871c-94bd-4b9b-862d-4c7cef530ece
x-trackingid: ccb50294-1b1f-4335-9126-7dcfed0e7d5f
x-frame-options: SAMEORIGIN
x-server-time-elapsed: 250
x-payload-size: 10582
x-powered-by: ARR/3.0
date: Wed, 08 May 2024 06:58:55 GMT
content-length: 9842
X-Firefox-Spdy: h2

neu-www.sway-cdn.com/Content/segoeui.woff

104.66.127.98

200 OK

76 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/segoeui.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 75464, version 0.0
Size
76 kB (75464 bytes)
Hash
5fa620c9eefcd9c86b00199b3733d6e8
8ba2626e252e2f39b3a063810dadee2b55e0643b
5b6231040840aed34ffe299d3f352814c3e24c517eb687cec06293e7eacecb1f

HTTP Headers

GET /Content/segoeui.woff HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 75464
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/Common.css

104.66.127.98

200 OK

28 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/Common.css
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
28 kB (27721 bytes)
Hash
d85d6ed927f23145dcf8b67bd4dba111
a497c4f87145c8568dbef0cb7832d05b14f7110b
4d2758d65f0be67c8bab930d2fd3576270b2522d5d60cca4fefa40d5fbcebb81

HTTP Headers

GET /161762440100_Content/Common.css HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 27721
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/Home.css

104.66.127.98

200 OK

32 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/Home.css
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
32 kB (31989 bytes)
Hash
676b87d5ad95754d468e2e8fe7fda78b
3e273867aab00db4fcf29baefc5c528e1ad53926
d411078332480e8ea193296de3ce3161553ea90cc593d5ce0ac8ddca6506652c

HTTP Headers

GET /161762440100_Content/Home.css HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 31989
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/StoryPage.js

104.66.127.98

200 OK

262 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/StoryPage.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size
262 kB (262122 bytes)
Hash
8f0f2fb85f30e911d8be44078f392344
85167056f8c51e155e4a89ed3b28e5e58b02791f
6b4d0d07f8a0aafd09dfa3806bada144aab09704390d8c57a9a8d76f516dd349

HTTP Headers

GET /161762440100_Content/StoryPage.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 262122
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/story_cluster.css

104.66.127.98

200 OK

930 B

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/story_cluster.css
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3298), with no line terminators
Size
930 B (930 bytes)
Hash
b05af20933a5c55d8228372b62cff439
8c7d1b8f149a66f4c82266c284aa12e2ca384cc1
583f54c663c161e490dd8991d9e9101a3ca54822f458e73dcfc4885ce0efe34f

HTTP Headers

GET /161762440100_Content/story_cluster.css HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 930
Cache-Control: public, max-age=67419
Date: Wed, 08 May 2024 06:58:56 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/StoryPage.css

104.66.127.98

200 OK

79 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/StoryPage.css
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
79 kB (79203 bytes)
Hash
c9d603858710d7e1dcd9158bad98b4b8
26e47ef27aedef469021b3cba19b5de6dc250ff9
8f3e1c114c15fbf1f4f239ada9aebdfc616ac27236b7290ef11d969e0653494b

HTTP Headers

GET /161762440100_Content/StoryPage.css HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 79203
Cache-Control: public, max-age=67418
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/favicon-192x192.png

104.66.127.98

200 OK

5.7 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/favicon-192x192.png
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
5.7 kB (5651 bytes)
Hash
9e295099860619954254f1507bb85ec0
8a4442b11d577c36d25761d4474c67292ccadf9c
ceddc01c593a39581cfaaabf6d6e2611ec8280cd15bbe63df32ce6820ccccc4d

HTTP Headers

GET /161762440100_Content/favicon-192x192.png HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 368fde32-cd22-4c75-a6bd-9d59bc218dbf
X-UserSessionId: 368fde32-cd22-4c75-a6bd-9d59bc218dbf
X-OfficeFE: SwayFrontEnd_IN_12
X-OfficeVersion: 16.0.17611.40102
X-OfficeCluster: neu-001.www.sway.com
X-Partitioning-Enabled: true
anonuserid: de9b020b-e01a-472c-9889-3c0e1ceda047
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
X-RequestId: 160c272c-0a1e-42d1-b075-0d7be3e4e77d
X-TrackingId: 86e1d414-abaf-49c0-a6b9-ad575e09c857
X-Powered-By: ARR/3.0
Content-Length: 5651
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/favicon-16x16.png

104.66.127.98

200 OK

449 B

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/favicon-16x16.png
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
449 B (449 bytes)
Hash
bbbd88901b3703b227f1158d7d6cdf3d
71fbff0b5d1deeb299fd663362b226b35f7e939e
28c98c3e57b496d377df3cbd176d7f0874705bba69a9d9fe60509cc89435c317

HTTP Headers

GET /161762440100_Content/favicon-16x16.png HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: dae0823f-b707-4227-bc63-885cc9d850eb
X-UserSessionId: dae0823f-b707-4227-bc63-885cc9d850eb
X-OfficeFE: SwayFrontEnd_IN_2
X-OfficeVersion: 16.0.17611.40102
X-OfficeCluster: neu-000.www.sway.com
X-Partitioning-Enabled: true
anonuserid: c6c58975-cef6-48ff-bd9f-33696508d50f
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
X-RequestId: 38e4b8e6-c0a6-47d4-81be-2e9dfe43f8db
X-TrackingId: a47123fe-35ee-435a-aaa8-6ecbadb368ed
X-Powered-By: ARR/3.0
Content-Length: 449
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/common_raw.js

104.66.127.98

200 OK

6.4 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/common_raw.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (23668), with no line terminators
Size
6.4 kB (6432 bytes)
Hash
16596d4249f021d9b71bb5caddb7cc3b
7d3f469ccef320e01ecd9c601e80ef5192326869
aa26cfe55e8cd183738f42180aae291dd666f4d39062e8a44c97b0be021946ef

HTTP Headers

GET /161762440100_Content/common_raw.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 6432
Cache-Control: public, max-age=67418
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/Content/Hammer-2.0.4.js

104.66.127.98

200 OK

6.4 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/Hammer-2.0.4.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (18177), with CRLF line terminators
Size
6.4 kB (6449 bytes)
Hash
d22d7500ab7c72da9195c571002c2495
528c2d1d834916f8a4c47191cb20d16d2f6a53d3
f2bfc0b2ffa4e26071e6d6d8b73d750f6e9f8eb4e021a8ffdb18b84af0b919a3

HTTP Headers

GET /Content/Hammer-2.0.4.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 6449
Cache-Control: public, max-age=84398
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive
Vary: Accept-Encoding

neu-www.sway-cdn.com/161762440100_Content/swayicon.woff

104.66.127.98

200 OK

22 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/swayicon.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 22140, version 1.0
Size
22 kB (22140 bytes)
Hash
7d6194a2c2e90678fee013960ea9eca7
98fa90ec84cafcf1e0ff194664e8b4c4d99c056e
e27855ef831cd10eb0fe2153d1b169d24a148e0b81d3dea001fd2637e7244238

HTTP Headers

GET /161762440100_Content/swayicon.woff HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 22140
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/traveling_dots1color_shorter_white.gif

104.66.127.98

200 OK

6.8 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/traveling_dots1color_shorter_white.gif
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 439 x 8
Size
6.8 kB (6828 bytes)
Hash
2bf75fed35af53b95f6265c32ae6fa86
20f92aed3ad96c505f7a21ccae780d8cee27f252
2e237d89d57788e810720fd97bcc0992e159044281956ecba83efd3a4f4b56cf

HTTP Headers

GET /161762440100_Content/traveling_dots1color_shorter_white.gif HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: e10cd187-3f94-4902-bfbc-b3dc83766bc9
X-UserSessionId: e10cd187-3f94-4902-bfbc-b3dc83766bc9
X-OfficeFE: SwayFrontEnd_IN_5
X-OfficeVersion: 16.0.17611.40102
X-OfficeCluster: neu-000.www.sway.com
X-Partitioning-Enabled: true
anonuserid: bb05fff5-7d4b-4ff4-adcf-9b6836770092
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
X-RequestId: 812f2c25-616e-49d5-8245-fe76ee58a7c3
X-TrackingId: 0e8524bc-77e9-4291-82cc-031f1a882ff0
X-Powered-By: ARR/3.0
Content-Length: 6828
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/story.png

104.66.127.98

200 OK

11 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/story.png
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
PNG image data, 310 x 319, 8-bit/color RGBA, non-interlaced
Size
11 kB (10721 bytes)
Hash
b0d76c4804189526dcef946d94ca58a9
ce86c3623f53e4b39d9cd33cc924afc45e91f94f
d46375075d66174f88ad9834c0695792c9afdd0f20456231fa4a873280a2c434

HTTP Headers

GET /161762440100_Content/story.png HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: dba5f646-9e6a-4210-a8e9-1286d37ea7d7
X-UserSessionId: dba5f646-9e6a-4210-a8e9-1286d37ea7d7
X-OfficeFE: SwayFrontEnd_IN_7
X-OfficeVersion: 16.0.17611.40102
X-OfficeCluster: neu-001.www.sway.com
X-Partitioning-Enabled: true
anonuserid: c24d9354-fa41-4f94-b98c-33aa5455f8a4
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
X-RequestId: 2fe69d0a-15c0-4641-9782-7e263f6d2abe
X-TrackingId: 00302d51-164b-475f-83d3-a3aae3e0719f
X-Powered-By: ARR/3.0
Content-Length: 10721
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/whitespinner.32x32.gif

104.66.127.98

200 OK

1.3 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/whitespinner.32x32.gif
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 32 x 32
Size
1.3 kB (1278 bytes)
Hash
71fe5aa913d40cb6e596c795eb2a0bdc
7b9925cee0045982261680d4ecef525b29efc314
11572f274d092466b9249659cfd382a0cfb640b23df4d4a1071c1b8d70147415

HTTP Headers

GET /161762440100_Content/whitespinner.32x32.gif HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: ea42dd60-8250-42a3-b23c-ed6bac4b3405
X-UserSessionId: ea42dd60-8250-42a3-b23c-ed6bac4b3405
X-OfficeFE: SwayFrontEnd_IN_2
X-OfficeVersion: 16.0.17611.40102
X-OfficeCluster: neu-001.www.sway.com
X-Partitioning-Enabled: true
anonuserid: b8c51ca8-40cd-46a4-8d4a-0e08f5c96d45
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
X-RequestId: 929cb621-1ec5-4634-801b-832513ed9869
X-TrackingId: 4b785dbf-3cb7-4d80-96b7-df1076a1a2c1
X-Powered-By: ARR/3.0
Content-Length: 1278
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

www.sway-cdn.com/Content/Benton_Modern-Roman_WebTT.woff

104.66.127.98

200 OK

56 kB

URL GET HTTP/1.1
www.sway-cdn.com/Content/Benton_Modern-Roman_WebTT.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 56140, version 1.0
Size
56 kB (56140 bytes)
Hash
a28cc518ce591e1c7cb47deff24ba8fa
d1f594d5df9b067ea832af4f9fa24a879d33ddaa
7d994d23401ef1689a9d7d8689016cac6b18cdcd80636ba659537c7c422cff7d

HTTP Headers

GET /Content/Benton_Modern-Roman_WebTT.woff HTTP/1.1
Host: www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 56140
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

www.sway-cdn.com/Content/Benton_Modern-Bold_WebTT.woff

104.66.127.98

200 OK

58 kB

URL GET HTTP/1.1
www.sway-cdn.com/Content/Benton_Modern-Bold_WebTT.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 57684, version 1.0
Size
58 kB (57684 bytes)
Hash
2e2950d400249b4f845b8f375e7db245
1426d8c66afbf8809c5f0723a1db03a0e17fbb16
5b66a7c74f4f28ace673cce7a00c5410bf560de72e3ed421474f4a2a3a4877a7

HTTP Headers

GET /Content/Benton_Modern-Bold_WebTT.woff HTTP/1.1
Host: www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Last-Modified: Wed, 24 Apr 2024 06:18:14 GMT
Accept-Ranges: bytes
ETag: "0d74e30f96da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 57684
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/161762440100_Content/swayiconsb.woff

104.66.127.98

200 OK

24 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/swayiconsb.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 23704, version 1.0
Size
24 kB (23704 bytes)
Hash
7dded8e00e4e1fa6b8301ba58fdb96f1
a5cc4c84ed041ef71d6a989b34b841942234ba2b
56c3f81e1fcada437f327ca47a70acbce01c7b3a8de0bc93081698ad039a7c42

HTTP Headers

GET /161762440100_Content/swayiconsb.woff HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 23704
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

neu-www.sway-cdn.com/Content/segoeui.woff

104.66.127.98

200 OK

76 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/Content/segoeui.woff
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 75464, version 0.0
Size
76 kB (75464 bytes)
Hash
5fa620c9eefcd9c86b00199b3733d6e8
8ba2626e252e2f39b3a063810dadee2b55e0643b
5b6231040840aed34ffe299d3f352814c3e24c517eb687cec06293e7eacecb1f

HTTP Headers

GET /Content/segoeui.woff HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 75464
Cache-Control: public, max-age=86400
Date: Wed, 08 May 2024 06:58:57 GMT
Connection: keep-alive

sway.cloud.microsoft/RemoteUls.ashx

52.111.243.45

200 OK

0 B

URL POST HTTP/2
sway.cloud.microsoft/RemoteUls.ashx
IP
52.111.243.45:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectsway.office.com
Fingerprint75:74:77:7E:17:E2:25:6C:D4:B2:4F:28:03:28:37:62:57:1B:12:95
ValidityFri, 08 Mar 2024 14:14:49 GMT - Mon, 03 Mar 2025 14:14:49 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

POST /RemoteUls.ashx HTTP/1.1
Host: sway.cloud.microsoft
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Content-Type: application/json
X-UserSessionId: a7723230-abed-4d00-aac7-1cc64c37f5c4
X-StoryId: FBH9RTwWXedlvmWuyFaS
X-LookupId: lAsxBmdzUG5VXXav
X-WebClientVersion: 201
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
Content-Length: 8599
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Cookie: AuthSess=b1f234f0-c3fa-47c1-b806-ef8328db93d9; AADNonce=ea71bb8d-df16-4e8c-a689-a5bff1262e0f.638507483354946936; CDNFailureCount=0; CalloutShownCount={"PanoramaNavigation":1}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 79291ab6-b556-4698-b825-88e4b834c83b
x-usersessionid: a7723230-abed-4d00-aac7-1cc64c37f5c4
x-officefe: SwayFrontEnd_IN_13
x-officeversion: 16.0.17624.40100
x-officecluster: weu-000.www.sway.com
x-partitioning-enabled: true
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
strict-transport-security: max-age=15724800; includeSubDomains; preload
timing-allow-origin: *
x-storyid: FBH9RTwWXedlvmWuyFaS
x-lookupid: lAsxBmdzUG5VXXav
x-requestid: e1c914ca-c975-47a6-a78f-480bc1555300
x-trackingid: 84d10f1e-6eae-4799-8513-e29240b41c50
x-buls-suppressionetag: N/A
x-buls-suppressedtags: 
x-content-type-options: nosniff, nosniff
x-download-options: noopen
content-disposition: attachment
x-powered-by: ARR/3.0
date: Wed, 08 May 2024 06:58:56 GMT
content-length: 0
X-Firefox-Spdy: h2

sway.cloud.microsoft/sway/v1.0/lAsxBmdzUG5VXXav/analytics?timeSpent=0&scrollDepth=0&readRatioGrade=0

52.111.243.45

202 Accepted

2 B

URL POST HTTP/2
sway.cloud.microsoft/sway/v1.0/lAsxBmdzUG5VXXav/analytics?timeSpent=0&scrollDepth=0&readRatioGrade=0
IP
52.111.243.45:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectsway.office.com
Fingerprint75:74:77:7E:17:E2:25:6C:D4:B2:4F:28:03:28:37:62:57:1B:12:95
ValidityFri, 08 Mar 2024 14:14:49 GMT - Mon, 03 Mar 2025 14:14:49 GMT

File type
JSON text data
Size
2 B (2 bytes)
Hash
d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

POST /sway/v1.0/lAsxBmdzUG5VXXav/analytics?timeSpent=0&scrollDepth=0&readRatioGrade=0 HTTP/1.1
Host: sway.cloud.microsoft
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Content-Type: application/json; charset=utf-8
X-StoryId: FBH9RTwWXedlvmWuyFaS
X-LookupId: lAsxBmdzUG5VXXav
X-WebClientVersion: 201
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
X-UserSessionId: a7723230-abed-4d00-aac7-1cc64c37f5c4
X-Key: ot2DwgCNpZN73gg4bTFtZIdcTZCFcSN8Whj0xSsMCGc=,638507483349634312
X-Requested-With: XMLHttpRequest
Origin: https://sway.cloud.microsoft
DNT: 1
Connection: keep-alive
Cookie: AuthSess=b1f234f0-c3fa-47c1-b806-ef8328db93d9; AADNonce=ea71bb8d-df16-4e8c-a689-a5bff1262e0f.638507483354946936; CDNFailureCount=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers

HTTP/2 202 Accepted
cache-control: private
content-type: application/json
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: CDNFailureCount=0; expires=Mon, 08-May-2023 06:58:58 GMT; path=/; secure
x-correlationid: d79b2b8b-3abe-4663-b1b5-00f6522d203a
x-usersessionid: a7723230-abed-4d00-aac7-1cc64c37f5c4
x-officefe: SwayFrontEnd_IN_10
x-officeversion: 16.0.17624.40100
x-officecluster: neu-001.www.sway.com
x-partitioning-enabled: true
anonuserid: 9f3e339f-4980-4629-9cf0-af2157bf2a1f
x-content-type-options: nosniff
strict-transport-security: max-age=15724800; includeSubDomains; preload
timing-allow-origin: *
x-storyid: FBH9RTwWXedlvmWuyFaS
x-lookupid: lAsxBmdzUG5VXXav
x-requestid: 8d668c46-df5c-492f-a8aa-4a8a03a0dac6
x-trackingid: b198e288-a7e8-4721-b637-dc2324d15bb5
x-frame-options: SAMEORIGIN
x-powered-by: ARR/3.0
date: Wed, 08 May 2024 06:58:57 GMT
content-length: 2
X-Firefox-Spdy: h2

neu-www.sway-cdn.com/161762440100_Content/feedback/OfficeBrowserFeedback.js

104.66.127.98

200 OK

45 kB

URL GET HTTP/1.1
neu-www.sway-cdn.com/161762440100_Content/feedback/OfficeBrowserFeedback.js
IP
104.66.127.98:443
ASN
#16625 AKAMAI-AS

Requested by
https://sway.cloud.microsoft/lAsxBmdzUG5VXXav?ref=3DLink
Certificate
IssuerMicrosoft Corporation
Subjectwww.sway-cdn.com
FingerprintE8:E0:26:75:8C:7E:58:DC:A0:76:65:3E:31:6D:68:B8:49:54:10:BB
ValidityThu, 10 Aug 2023 15:52:12 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32416)
Size
45 kB (45168 bytes)
Hash
9f5dba23bbfb4e0d50ac9aa6ce998d1a
0f027b6b4fd323c708592dcde052774ca7fd5fd6
4f2d6301347a2fbf30fed521f2d319e78cffd90713336dcc9c0a2676dc3fb37c

HTTP Headers

GET /161762440100_Content/feedback/OfficeBrowserFeedback.js HTTP/1.1
Host: neu-www.sway-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sway.cloud.microsoft/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-Powered-By: ARR/3.0
Content-Length: 45168
Cache-Control: public, max-age=67418
Date: Wed, 08 May 2024 06:58:59 GMT
Connection: keep-alive
Vary: Accept-Encoding

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (29)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash