r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6418
Expires: Wed, 04 Jan 2023 14:23:41 GMT
Date: Wed, 04 Jan 2023 12:36:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13863
Expires: Wed, 04 Jan 2023 16:27:46 GMT
Date: Wed, 04 Jan 2023 12:36:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 04 Jan 2023 11:47:43 GMT
content-type: application/json
age: 2940
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3102
Expires: Wed, 04 Jan 2023 13:28:25 GMT
Date: Wed, 04 Jan 2023 12:36:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4075tBj096P8EMtA/Co0DV4vi0yDAe44AsFUqUmXcLzKdrbbaJDfEVFAV9O0MKa6JmzpFm88HsfSf5QQhSekjw==
x-amz-request-id: QPS41M4C0JT1T1ZP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 04 Jan 2023 12:01:18 GMT
age: 2125
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 12:36:43 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 04 Jan 2023 12:33:37 GMT
age: 186
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
forms.office.com/r/12yJP3D7mc
13.107.6.194301 Moved Permanently 0 B URL HTTP/2 forms.office.com/r/12yJP3D7mc
IP 13.107.6.194:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/12yJP3D7mc HTTP/1.1
Host: forms.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Connection: keep-alive
HTTP/2 301 Moved Permanently
cache-control: no-cache
pragma: no-cache
expires: -1
location: https://forms.office.com/pages/responsepage.aspx?id=PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: afe48a8e-1ecf-44a5-8108-240703baae68
x-usersessionid: afe48a8e-1ecf-44a5-8108-240703baae68
x-officefe: FormIntelligenceService_IN_4
x-officeversion: 16.0.16022.42052
x-officecluster: eus2-101.forms.office.com
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 88691BE2DD03464C92CF5CC72C3DB708 Ref B: SVG20EDGE0117 Ref C: 2023-01-04T12:36:43Z
date: Wed, 04 Jan 2023 12:36:43 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fe74c226e54f2f382d278b594df930ae
4e4ebc661443f56b74d7c924ddae50bcb107f0af
511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4369
Cache-Control: max-age=164576
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 12:36:44 GMT
Etag: "63b541ab-1d7"
Expires: Fri, 06 Jan 2023 10:19:40 GMT
Last-Modified: Wed, 04 Jan 2023 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.242.3.166101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.3.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Vy+TrhYNujn94qQOH7cYmA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: w5eKkLIxMr9kpSYieyVnpcttOH0=
cdn.forms.office.net/forms/css/dist/light-response-page.min.28b54b5.css
23.36.76.145200 OK 24 kB URL HTTP/2 cdn.forms.office.net/forms/css/dist/light-response-page.min.28b54b5.css
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65470), with no line terminators
Hash a570e104195aa3e9e82a631dd6618fc0
9d8d32d48ad9324a0ecfbe058a8684385b8f8895
e3e53d9c55405ec242155cfb2817af97804351d10e9a232349d2fb8d295229fe
GET /forms/css/dist/light-response-page.min.28b54b5.css HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.office.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 23496
content-type: text/css
content-md5: pXDhBBlao+noKmMd1mGPwA==
last-modified: Thu, 22 Dec 2022 03:06:58 GMT
etag: 0x8DAE3C996FFC644
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e92ac5ad-b01e-003d-08c8-151cdf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.min.27b73af.js
23.36.76.145200 OK 88 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.min.27b73af.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (43226)
Hash 189fdbf937f025614bcac962561ed410
eeead565acab1a8097b7365aee8eb046e961e132
9cbf60b08dbb3b62b31cfd1304642b9a722113b1b5e1b684cdfa90356717b31e
GET /forms/scripts/dists/light-response-page.min.27b73af.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forms.office.com
Connection: keep-alive
Referer: https://forms.office.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 88019
content-type: application/javascript
content-md5: GJ/b+TfwJWFLysliVh7UEA==
last-modified: Wed, 28 Dec 2022 00:21:32 GMT
etag: 0x8DAE86978DC53DF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: cde59d79-501e-005a-5d71-1aaf78000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7063
Expires: Wed, 04 Jan 2023 14:34:27 GMT
Date: Wed, 04 Jan 2023 12:36:44 GMT
Connection: keep-alive
forms.office.com/pages/responsepage.aspx?id=PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u
13.107.6.194200 OK 24 kB URL HTTP/2 forms.office.com/pages/responsepage.aspx?id=PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u
IP 13.107.6.194:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (24707), with CRLF, LF line terminators
Hash 151d14fb348505d3fa74d3894b6dad92
a532c90d2ec92288236d99f94ea1dd748aaa3b02
5b3a52177685aeabe43a446203027211df0c1cef6b754617ece9a075ca95cf58
GET /pages/responsepage.aspx?id=PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u HTTP/1.1
Host: forms.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: br
expires: 0
vary: Accept-Encoding
set-cookie: __RequestVerificationToken=gUOSPkH7yMldH1H_kchHLr5zWDJ0oDHEiZmx4Z1hDjfYaXa55GMr0VBb3H2m2c_R-7n8UJHkOMu7TaygWbIbZiPYzRCvLQdW4L-E4rJqLxw1; path=/; secure; samesite=none; httponly
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: weu-100.forms.office.com
x-routingofficefe: FormsSingleBox_IN_7
x-routingofficeversion: 16.0.16029.42052
x-routingsessionid: 73d2b8ad-2cd4-480c-915b-fe57cbbdc5a0
x-routingcorrelationid: 5864ba3a-7184-4fb0-885f-31f1e0462bcf
x-correlationid: 5864ba3a-7184-4fb0-885f-31f1e0462bcf
x-officecluster: weu-100.forms.office.com
x-officefe: FormsSingleBox_IN_7
x-officeversion: 16.0.16029.42052
x-usersessionid: 73d2b8ad-2cd4-480c-915b-fe57cbbdc5a0
x-robots-tag: noindex, nofollow
link: <https://cdn.forms.office.net/forms>; rel=preconnect; crossorigin=anonymous
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6D5DF27BEFB342B7B01C811D1252443C Ref B: SVG20EDGE0117 Ref C: 2023-01-04T12:36:43Z
date: Wed, 04 Jan 2023 12:36:43 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7063
Expires: Wed, 04 Jan 2023 14:34:27 GMT
Date: Wed, 04 Jan 2023 12:36:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7063
Expires: Wed, 04 Jan 2023 14:34:27 GMT
Date: Wed, 04 Jan 2023 12:36:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7063
Expires: Wed, 04 Jan 2023 14:34:27 GMT
Date: Wed, 04 Jan 2023 12:36:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 359f30e64bec00d0a01acd69a08b684d
ac965c8642c4d1e47713965060fa2fc8f19088b1
fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11877
x-amzn-requestid: 884b9243-6a8a-4434-9b2a-e5eff84d4e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33bFnDoAMFpoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-3f7043ae29d21e010ddc1ff9;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AmpRiMJDlhYtRCxTT0l7VEPHwk7eK_rnGceIYRUobRqi8hIM2LMrCQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:00:54 GMT
age: 52550
etag: "ac965c8642c4d1e47713965060fa2fc8f19088b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0f7ef195ef59caf6b47f13ceae04987f
dbff30aac035b502e27a3a538dbdfd475d3fc1d4
b31c198d6b76827201a870da6f9fe9b28c2cffe0d3f7f3d8e0530223ea8fc9d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: 7712cf7e-ea08-47da-876a-ba70c723b68b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33cHXsIAMFhhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-3c965abb517a33ce31cbdf4c;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rFfuD3wwqKgnQbgzyH5dJP3ESEGRF_FYvH85dCgVG0PgvHF7kYkVhQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:57:14 GMT
age: 52770
etag: "dbff30aac035b502e27a3a538dbdfd475d3fc1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V8_4JXT2EDqqzVxBjZK7SUVVS9Pez_EbpGP8BCMX0FrS2x2srUr2Ug==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:11:09 GMT
age: 51935
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af78916e285d0f6c5c5a5ff33894e108
96df0d8c10c666811cfeb98187ca93e65480c2ff
7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5018
x-amzn-requestid: 7a68cfb1-dedd-4f08-8d99-4678c1087422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtFHkoAMFwYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-7880e5f93c99cc794f9a03bb;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MvV5dXthUr0Qo499_5eG6Z_yW0gmflen3kRBrse7ngQjUgOVA0OMvg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:48:41 GMT
age: 53283
etag: "96df0d8c10c666811cfeb98187ca93e65480c2ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50966eaa-29cb-4706-8bda-5f13662a8ef8.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50966eaa-29cb-4706-8bda-5f13662a8ef8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a73b5d924c7b0bcd92d0854d7904769e
468e0acd0a0cd5539ee8a274a0fb4a2af8bcb83f
27c638c7e32368549faff0bf39662c606c17f36a4c5552207a52cc2a9fff02f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50966eaa-29cb-4706-8bda-5f13662a8ef8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6447
x-amzn-requestid: d809af38-e1e7-445b-a605-1182ee70e183
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d42LGEbcIAMF4Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad03e0-7b724db22250c9c3111121a9;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 03:05:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bbBLjDYgF6TJDgJx9OoatQTkA7suOoxAL4tJBeTeH-4NH9h-TsWRww==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 10:42:10 GMT
age: 6874
etag: "468e0acd0a0cd5539ee8a274a0fb4a2af8bcb83f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36836a00-5089-401d-9a69-e25230099d0a.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36836a00-5089-401d-9a69-e25230099d0a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cb033e4a3035a49677a810f764021597
a76b2ab1c4b33be2244cc4e81ee56b95d9ddc860
fa816b99c77b4c1ac27153355574d7a4fbdc1a43ac8417bdfd45004fb54b878a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36836a00-5089-401d-9a69-e25230099d0a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6861
x-amzn-requestid: eb43b3e5-316e-4fa0-b6a7-696e747a4e6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3IuGQFoAMFwbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49f04-3d752ea257c839dc59e5b803;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 00E0yhrr9z2tJ-8fyJ-ANOEdeY9sK72o7HogOfr7AoeN9ubT7jY2OA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:00:55 GMT
age: 52549
etag: "a76b2ab1c4b33be2244cc4e81ee56b95d9ddc860"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js
23.36.76.145200 OK 60 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (64399), with no line terminators
Hash b1dd9314897dc29b93790ab0cfe15375
a23990a15fc3af85920c87694e52d89b05d288c8
43f1c2253f5e24a7fa2aeb9f18e8e5bf80f3b41ca5b80dc7bf66aa52dcf25f04
GET /forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 59596
content-type: application/javascript
content-md5: sd2TFIl9wpuTeQqwz+FTdQ==
last-modified: Fri, 23 Dec 2022 04:37:07 GMT
etag: 0x8DAE49F59230E8A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0462d996-a01e-0044-6596-167595000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js
23.36.76.145200 OK 4.4 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (12349), with no line terminators
Hash 5dda04df36f553b7efc76b3981cfd67b
3995045c07906d4f7b21c310a928e7ef8465fa9d
06aef12ec135112a0b277ffb6ef37192a68eabf337099ff6c033c772f6c2775c
GET /forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 4396
content-type: application/javascript
content-md5: XdoE3zb1U7fvx2s5gc/Wew==
last-modified: Fri, 23 Dec 2022 04:37:07 GMT
etag: 0x8DAE49F5967D5AE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b5881e1a-301e-0027-5c96-1633b0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/images/favicon.ico
23.36.76.145200 OK 7.9 kB URL HTTP/2 cdn.forms.office.net/forms/images/favicon.ico
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 9425d8e9313a692bb3f022e8055fab82
eddcf3ea767d4c3042d01ac88594d7e795d8615c
f2a1abcf12ebd0f329e5b66b811b0bd76c8e954cb283ce3b61e72fbf459ef6f1
GET /forms/images/favicon.ico HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
content-md5: lCXY6TE6aSuz8CLoBV+rgg==
last-modified: Mon, 27 Jun 2022 04:08:36 GMT
etag: 0x8DA57F2B5C5EE03
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 770a9f31-601e-001d-4325-8a7013000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.sw.d097b04.js
23.36.76.145200 OK 412 B URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.sw.d097b04.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (953), with no line terminators
Hash 1afa0b19f7d470b41237d9a0fde05b93
b2127b4e904185208ed843b14c2df890c160e019
d237c85b511310416a5c6425b92f45d5de709734ded83b2ca792d729de99fd35
GET /forms/scripts/dists/light-response-page.chunk.sw.d097b04.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 412
content-type: application/javascript
content-md5: GvoLGffUcLQSN9mg/eBbkw==
last-modified: Sat, 08 Oct 2022 03:26:43 GMT
etag: 0x8DAA8DCEC408DD6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 43382929-601e-0059-7fe8-daac7f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.1ds.4a73f96.js
23.36.76.145200 OK 30 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.1ds.4a73f96.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (35971)
Hash 1ac2a9e427e4552722fdc4e39d45bd43
0d93f5f2a721f036290c2aa05ff3f31439dfb710
ea0fcccd273ccd6f9c3fa3a41269b11c205ea27458f312f73cf68b3c991dee9f
GET /forms/scripts/dists/light-response-page.chunk.1ds.4a73f96.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 30105
content-type: application/javascript
content-md5: GsKp5CfkVSci/cTjnUW9Qw==
last-modified: Fri, 28 Oct 2022 04:14:17 GMT
etag: 0x8DAB89AE1D68FA7
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 00f0c7a9-001e-0060-6d92-eaecdb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:44 GMT
date: Wed, 04 Jan 2023 12:36:44 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
c.office.com/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Referer: https://forms.office.com/
Connection: keep-alive
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=380CE33FB5E8454DA8C38DCAA29AAA41&RedC=c.office.com&MXFR=07E22748A3A9603102CD35C7A7A96B28
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.office.com; path=/; SameSite=None; Secure;
MUID=07E22748A3A9603102CD35C7A7A96B28; domain=.office.com; expires=Mon, 29-Jan-2024 12:36:45 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 04 Jan 2023 12:36:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=380CE33FB5E8454DA8C38DCAA29AAA41&RedC=c.office.com&MXFR=07E22748A3A9603102CD35C7A7A96B28
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=380CE33FB5E8454DA8C38DCAA29AAA41&RedC=c.office.com&MXFR=07E22748A3A9603102CD35C7A7A96B28
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=380CE33FB5E8454DA8C38DCAA29AAA41&RedC=c.office.com&MXFR=07E22748A3A9603102CD35C7A7A96B28 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.office.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.office.com/c.gif?CtsSyncId=380CE33FB5E8454DA8C38DCAA29AAA41&MUID=07E22748A3A9603102CD35C7A7A96B28
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=07E22748A3A9603102CD35C7A7A96B28; domain=.bing.com; expires=Mon, 29-Jan-2024 12:36:45 GMT; path=/; SameSite=None; Secure; Priority=High;
SRM_B=07E22748A3A9603102CD35C7A7A96B28; domain=c.bing.com; expires=Mon, 29-Jan-2024 12:36:45 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 183FE5E8E4154341A704794BE1954E3D Ref B: OSL30EDGE0515 Ref C: 2023-01-04T12:36:45Z
date: Wed, 04 Jan 2023 12:36:44 GMT
content-length: 0
X-Firefox-Spdy: h2
js.monitor.azure.com/scripts/c/ms.jsll-3.min.js
13.107.219.53200 OK 62 kB URL HTTP/2 js.monitor.azure.com/scripts/c/ms.jsll-3.min.js
IP 13.107.219.53:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65410)
Hash 4a4e3e210205f24706c11d81142981d6
161dc296eb6a39df14611bcf7a0e9a2ef6eb4fd9
f0a15b4950860b4da797d2a2c27b7dac5a35c3c89299c78057fc1aa0f73c0635
GET /scripts/c/ms.jsll-3.min.js HTTP/1.1
Host: js.monitor.azure.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
HTTP/2 200 OK
cache-control: public, max-age=1800, immutable, no-transform
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: yrkf9GZ1Xvz6HYOCdF/nTw==
last-modified: Wed, 02 Nov 2022 19:31:15 GMT
etag: 0x8DABD08CF2EB3C0
x-cache: TCP_HIT
x-ms-request-id: 6a05fbc5-a01e-00c4-3535-20b0c7000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 3.2.8
x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-3.2.8.min.js
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0VW61YwAAAAD7fgRyDEqUQKl4FHnlmwm4QU1TMDRFREdFMTgxNABmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
x-azure-ref: 03HK1YwAAAAANIkdLFpPlS6GHJM3z6fi5T1NMMjMxMDUwMjA0MDA5AGYxY2E3M2Q0LTg4ODMtNGNhZi1hYmRjLWZlMmQ1NjdhZmI5Ng==
date: Wed, 04 Jan 2023 12:36:44 GMT
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js
23.36.76.145200 OK 60 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (64399), with no line terminators
Hash b1dd9314897dc29b93790ab0cfe15375
a23990a15fc3af85920c87694e52d89b05d288c8
43f1c2253f5e24a7fa2aeb9f18e8e5bf80f3b41ca5b80dc7bf66aa52dcf25f04
GET /forms/scripts/dists/light-response-page.chunk.lrp_ext.52eca51.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-length: 59596
content-type: application/javascript
content-md5: sd2TFIl9wpuTeQqwz+FTdQ==
last-modified: Fri, 23 Dec 2022 04:37:07 GMT
etag: 0x8DAE49F59230E8A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0462d996-a01e-0044-6596-167595000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:45 GMT
date: Wed, 04 Jan 2023 12:36:45 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_cover.36dce50.js
23.36.76.145200 OK 34 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_cover.36dce50.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (47119)
Hash 71fee67c8ab8d27d0d2a744150b9cb74
cfc79ff1bcabf9cab47bb7af064568f28d6006df
cd41bb786cf5a165202e8c9eac06b39c3392687d7b8d203b8bcec8baf0f18143
GET /forms/scripts/dists/light-response-page.chunk.lrp_cover.36dce50.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-length: 33690
content-type: application/javascript
content-md5: cf7mfIq40n0NKnRBULnLdA==
last-modified: Wed, 28 Dec 2022 00:21:31 GMT
etag: 0x8DAE8697892AB83
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8e80a0cf-c01e-005f-0771-1a5b07000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:45 GMT
date: Wed, 04 Jan 2023 12:36:45 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js
23.36.76.145200 OK 4.4 kB URL HTTP/2 cdn.forms.office.net/forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js
IP 23.36.76.145:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (12349), with no line terminators
Hash 5dda04df36f553b7efc76b3981cfd67b
3995045c07906d4f7b21c310a928e7ef8465fa9d
06aef12ec135112a0b277ffb6ef37192a68eabf337099ff6c033c772f6c2775c
GET /forms/scripts/dists/light-response-page.chunk.lrp_post.boot.0d33652.js HTTP/1.1
Host: cdn.forms.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-length: 4396
content-type: application/javascript
content-md5: XdoE3zb1U7fvx2s5gc/Wew==
last-modified: Fri, 23 Dec 2022 04:37:07 GMT
etag: 0x8DAE49F5967D5AE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b5881e1a-301e-0027-5c96-1633b0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
access-control-allow-origin: *
cache-control: max-age=31536000
expires: Thu, 04 Jan 2024 12:36:45 GMT
date: Wed, 04 Jan 2023 12:36:45 GMT
timing-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
forms.office.com/sw.js?ring=Business
13.107.6.194304 Not Modified 0 B URL HTTP/2 forms.office.com/sw.js?ring=Business
IP 13.107.6.194:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw.js?ring=Business HTTP/1.1
Host: forms.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: __RequestVerificationToken=gUOSPkH7yMldH1H_kchHLr5zWDJ0oDHEiZmx4Z1hDjfYaXa55GMr0VBb3H2m2c_R-7n8UJHkOMu7TaygWbIbZiPYzRCvLQdW4L-E4rJqLxw1; ai_session=JAgLx8oZ3gR59cxLSEnKmC|1672835795527|1672835795527; MUID=07E22748A3A9603102CD35C7A7A96B28
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
If-Modified-Since: Thu, 29 Dec 2022 07:11:16 GMT
If-None-Match: "1d91b54bdd29f70"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
cache-control: public, max-age=86400
content-type: application/javascript
last-modified: Thu, 29 Dec 2022 07:11:16 GMT
accept-ranges: bytes
etag: "1d91b54bdd29f70"
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: weu-100.forms.office.com
x-routingofficefe: FormsSingleBox_IN_0
x-routingofficeversion: 16.0.16029.42052
x-routingsessionid: 224cbc88-4e4e-4e60-b2c0-f4edfa97d7aa
x-routingcorrelationid: 591d01f5-975b-447f-9ef6-ddd1e74dbe5b
x-correlationid: 591d01f5-975b-447f-9ef6-ddd1e74dbe5b
x-officecluster: weu-100.forms.office.com
x-officefe: FormsSingleBox_IN_0
x-officeversion: 16.0.16029.42052
x-usersessionid: 224cbc88-4e4e-4e60-b2c0-f4edfa97d7aa
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 10F4FA2EF8EF45E4ACA3C294392D05FE Ref B: SVG20EDGE0117 Ref C: 2023-01-04T12:36:45Z
date: Wed, 04 Jan 2023 12:36:45 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
40.79.189.59200 OK 0 B URL HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP 40.79.189.59:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://forms.office.com
Date: Wed, 04 Jan 2023 12:36:46 GMT
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
40.79.189.59200 OK 153 B URL HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP 40.79.189.59:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash d7261b87f552306f54e0d678bd5dedc4
41cbdd660b0500f46cb3a3b19c1129c4b50f96ae
47519b9283ad0fdfa4afd7f545723c12bb3638873d910c606ede8c61ca53b21d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-json-stream
Content-Length: 2177
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: a0d933fc7f95442badc743f4d77f4aab-f980f8ea-160a-4432-92a4-80c87df83f4b-7539
upload-time: 1672835796530
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
Origin: https://forms.office.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
HTTP/1.1 200 OK
Content-Length: 153
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: MC1=GUID=834c7904ab95483aa85f64757db4ff8a&HASH=834c&LV=202301&V=4&LU=1672835807167; Domain=.microsoft.com; Expires=Thu, 04 Jan 2024 12:36:47 GMT; Path=/;Secure; SameSite=None
MS0=c7acdeda86644a0c93c9a46b53c8ff35; Domain=.microsoft.com; Expires=Wed, 04 Jan 2023 13:06:47 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 10637
Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://forms.office.com
Access-Control-Expose-Headers: time-delta-millis
Date: Wed, 04 Jan 2023 12:36:47 GMT
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
13.69.116.104200 OK 0 B URL HTTP/1.1 eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP 13.69.116.104:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://forms.office.com/
Origin: https://forms.office.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://forms.office.com
Date: Wed, 04 Jan 2023 12:36:46 GMT
eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
13.69.116.104200 OK 153 B URL HTTP/1.1 eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP 13.69.116.104:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 671d608726eddc9a6712d2319a103c57
91705ab4bf464b9e36bb41c5e405923471e58659
30a720ad4b5b137a02cee1c3b7c83f6817f43d3d39b57650fd49bd3605e77362
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-json-stream
Content-Length: 12984
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.7
apikey: 2ddc7e5f54754fc68f3ae1c5b7f3eb20-1883aa8c-4c7b-42d1-b3d6-c9cdb5956783-7092
upload-time: 1672835797741
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
Origin: https://forms.office.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
HTTP/1.1 200 OK
Content-Length: 153
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: MC1=GUID=d86321aee85444d38ce285489f872b1d&HASH=d863&LV=202301&V=4&LU=1672835807463; Domain=.microsoft.com; Expires=Thu, 04 Jan 2024 12:36:47 GMT; Path=/;Secure; SameSite=None
MS0=dc45ae4110b64b0f81a5b09ae75eca04; Domain=.microsoft.com; Expires=Wed, 04 Jan 2023 13:06:47 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 9722
Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://forms.office.com
Access-Control-Expose-Headers: time-delta-millis
Date: Wed, 04 Jan 2023 12:36:47 GMT
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
40.79.189.59200 OK 153 B URL HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP 40.79.189.59:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 8f107a0fcc28f53b5f4cba18709e8a4f
410cfd2a4482b4da3f1bfe085ab10e28963a374b
c31ac0c636b770820dd89d42f44a499e470eee07f6c75afadca825a4a9eb1b6b
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-json-stream
Content-Length: 1136
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: a0d933fc7f95442badc743f4d77f4aab-f980f8ea-160a-4432-92a4-80c87df83f4b-7539
upload-time: 1672835797783
time-delta-to-apply-millis: 10637
cache-control: no-cache, no-store
Origin: https://forms.office.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://forms.office.com/
Connection: keep-alive
Cookie: MC1=GUID=834c7904ab95483aa85f64757db4ff8a&HASH=834c&LV=202301&V=4&LU=1672835807167; MS0=c7acdeda86644a0c93c9a46b53c8ff35
HTTP/1.1 200 OK
Content-Length: 153
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 9634
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://forms.office.com
Access-Control-Expose-Headers: time-delta-millis
Date: Wed, 04 Jan 2023 12:36:47 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcad027c6-d4cf-4ecc-9bfe-7d5bc7aa9943.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcad027c6-d4cf-4ecc-9bfe-7d5bc7aa9943.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fc273ef8f961856104714e8d6736c3b
b9eed9b58efa09663eeb81aa9a7b600ac78293e1
7b1fb506fdd19cd5771539e9e4d3bbb69e327120ddc74899839f536d04b43704
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcad027c6-d4cf-4ecc-9bfe-7d5bc7aa9943.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 13447
x-amzn-requestid: c8fae54e-7a1f-45e5-a64c-e975529b0b94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33cEEcIAMFTfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-7f3f56ab28c3f5db4e847d4d;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NPwbCajKFtHT6m-bLcrvI0vYSNpYoZBBwq6xNUtu-J5aYcgHz-JCQw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:58:29 GMT
age: 52702
etag: "b9eed9b58efa09663eeb81aa9a7b600ac78293e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
forms.office.com/sw.js?ring=Business
13.107.6.194200 OK 0 B URL HTTP/2 forms.office.com/sw.js?ring=Business
IP 13.107.6.194:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /sw.js?ring=Business HTTP/1.1
Host: forms.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: __RequestVerificationToken=gUOSPkH7yMldH1H_kchHLr5zWDJ0oDHEiZmx4Z1hDjfYaXa55GMr0VBb3H2m2c_R-7n8UJHkOMu7TaygWbIbZiPYzRCvLQdW4L-E4rJqLxw1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: application/javascript
content-encoding: br
last-modified: Thu, 29 Dec 2022 07:11:16 GMT
accept-ranges: bytes
etag: "1d91b54bdd29f70"
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: weu-100.forms.office.com
x-routingofficefe: FormsSingleBox_IN_7
x-routingofficeversion: 16.0.16029.42052
x-routingsessionid: 0742e669-5ace-465b-a2fd-b22a90261c24
x-routingcorrelationid: 3dda9b85-69f9-4cb1-b0dd-767a21ddb57f
x-correlationid: 3dda9b85-69f9-4cb1-b0dd-767a21ddb57f
x-officecluster: weu-100.forms.office.com
x-officefe: FormsSingleBox_IN_7
x-officeversion: 16.0.16029.42052
x-usersessionid: 0742e669-5ace-465b-a2fd-b22a90261c24
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1DA5EB6855CA4C0196EB74C9DD918ABE Ref B: SVG20EDGE0117 Ref C: 2023-01-04T12:36:44Z
date: Wed, 04 Jan 2023 12:36:43 GMT
X-Firefox-Spdy: h2
forms.office.com/formapi/api/cc89b43c-8b93-40da-9aae-a7affedd8577/users/1261e182-49a7-44d6-96d3-c92768c75912/light/runtimeFormsWithResponses('PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u')?$expand=questions($expand=choices)
13.107.6.194200 OK 0 B URL HTTP/2 forms.office.com/formapi/api/cc89b43c-8b93-40da-9aae-a7affedd8577/users/1261e182-49a7-44d6-96d3-c92768c75912/light/runtimeFormsWithResponses('PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u')?$expand=questions($expand=choices)
IP 13.107.6.194:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /formapi/api/cc89b43c-8b93-40da-9aae-a7affedd8577/users/1261e182-49a7-44d6-96d3-c92768c75912/light/runtimeFormsWithResponses('PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u')?$expand=questions($expand=choices) HTTP/1.1
Host: forms.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-UserSessionId: 73d2b8ad-2cd4-480c-915b-fe57cbbdc5a0
__RequestVerificationToken: 8B8mDVE7tfoZUY4oTy-HALfxXSj3Vp00XClLiHbnI_1gcQKD18Rdeyfv_zzyMTtiS8J6t3Q1WoQW6xFgeHsMSaEQFLNhUqiPmPe9Ixzd4NQ1
Connection: keep-alive
Referer: https://forms.office.com/pages/responsepage.aspx?id=PLSJzJOL2kCarqev_t2Fd4LhYRKnSdZEltPJJ2jHWRJUQ0hGVENaTFNFUVJGWE5XTkFFRURQQjYzMS4u
Cookie: __RequestVerificationToken=gUOSPkH7yMldH1H_kchHLr5zWDJ0oDHEiZmx4Z1hDjfYaXa55GMr0VBb3H2m2c_R-7n8UJHkOMu7TaygWbIbZiPYzRCvLQdW4L-E4rJqLxw1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: weu-100.forms.office.com, weu-101.forms.office.com
x-routingofficefe: FormsSingleBox_IN_13, FormsSingleBox_IN_11
x-routingofficeversion: 16.0.16029.42052, 16.0.16022.42052
x-routingsessionid: 73d2b8ad-2cd4-480c-915b-fe57cbbdc5a0
x-routingcorrelationid: df4b07da-a553-4d2f-959a-416da7b2c17f
x-correlationid: df4b07da-a553-4d2f-959a-416da7b2c17f
x-officecluster: weu-101.forms.office.com
x-officefe: FormsSingleBox_IN_12
x-officeversion: 16.0.16022.42052
x-usersessionid: 73d2b8ad-2cd4-480c-915b-fe57cbbdc5a0
x-robots-tag: noindex, nofollow
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 935DAC09C6D34BD49A9042A7F389AD18 Ref B: SVG20EDGE0117 Ref C: 2023-01-04T12:36:44Z
date: Wed, 04 Jan 2023 12:36:43 GMT
X-Firefox-Spdy: h2
lists.office.com/Images/cc89b43c-8b93-40da-9aae-a7affedd8577/1261e182-49a7-44d6-96d3-c92768c75912/TCHFTCZLSEQRFXNWNAEEDPB631/5c082838-0731-4b27-b6f4-29ceed561977
52.109.88.76200 OK 0 B URL HTTP/2 lists.office.com/Images/cc89b43c-8b93-40da-9aae-a7affedd8577/1261e182-49a7-44d6-96d3-c92768c75912/TCHFTCZLSEQRFXNWNAEEDPB631/5c082838-0731-4b27-b6f4-29ceed561977
IP 52.109.88.76:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /Images/cc89b43c-8b93-40da-9aae-a7affedd8577/1261e182-49a7-44d6-96d3-c92768c75912/TCHFTCZLSEQRFXNWNAEEDPB631/5c082838-0731-4b27-b6f4-29ceed561977 HTTP/1.1
Host: lists.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Referer: https://forms.office.com/
Connection: keep-alive
HTTP/2 200 OK
content-type: image/png
date: Wed, 04 Jan 2023 12:36:44 GMT
cache-control: no-cache
expires: -1
pragma: no-cache
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: weu-100.lists.office.com
x-routingofficefe: CollabDBReverseProxyWithMappingService_IN_3
x-routingofficeversion: 16.0.16026.42103
x-routingsessionid: 7e7a4cdb-0623-4338-8bac-57f75acf28d5
x-routingcorrelationid: e1816f51-8bd5-40ef-8567-f395b4625060
x-hivering: 3
X-Firefox-Spdy: h2