{"report_id":"30e3b8f2-5740-4447-a38a-5752199974e2","version":6,"status":"done","tags":[],"date":"2025-10-01T07:38:21Z","url":{"schema":"https","addr":"eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.office.com%2Fe%2FNHykLchTCF\u0026data=05%7C02%7CTony.Cutajar%40gallifordtry.co.uk%7Cc6325af26fd748ba172908ddf51d125a%7C15813f7f44bc4e8fbab129b341c4f66f%7C0%7C0%7C638936227450795993%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=1tXbgo3KrGjJT8dSnGgzInVn2bxGLTH49V77xgG2TLc%3D\u0026reserved=0","fqdn":"eur03.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.115.79","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"title":"Supervisor Survey"},"submit":{"url":{"schema":"https","addr":"eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.office.com%2Fe%2FNHykLchTCF\u0026data=05%7C02%7CTony.Cutajar%40gallifordtry.co.uk%7Cc6325af26fd748ba172908ddf51d125a%7C15813f7f44bc4e8fbab129b341c4f66f%7C0%7C0%7C638936227450795993%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=1tXbgo3KrGjJT8dSnGgzInVn2bxGLTH49V77xgG2TLc%3D\u0026reserved=0","fqdn":"eur03.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.115.79","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-05T07:38:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"forms.office.com","ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1999-04-20","domain_rank":5422,"first_seen":"2017-01-30T06:55:19Z","last_seen":"2025-09-30T15:26:57.646067Z","alert_count":0,"request_count":3,"received_data":158395,"sent_data":2470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"odc.officeapps.live.com","ip":{"addr":"52.109.68.130","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"domain_registered":"1994-12-28","domain_rank":675,"first_seen":"2014-11-11T14:53:03Z","last_seen":"2025-09-30T15:26:57.770001Z","alert_count":0,"request_count":2,"received_data":3623,"sent_data":1387,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"eu-mobile.events.data.microsoft.com","ip":{"addr":"13.69.239.72","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"1991-05-02","domain_rank":3935,"first_seen":"2021-09-30T13:36:21Z","last_seen":"2025-09-29T16:28:58.463995Z","alert_count":0,"request_count":2,"received_data":1083,"sent_data":1513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"c.bing.com","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":836,"first_seen":"2012-05-22T10:26:32Z","last_seen":"2025-09-29T14:50:22.532168Z","alert_count":0,"request_count":1,"received_data":1113,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"forms.cloud.microsoft","ip":{"addr":"150.171.73.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2015-09-25","domain_rank":22076,"first_seen":"2023-09-21T10:57:45Z","last_seen":"2025-09-30T15:26:57.863398Z","alert_count":0,"request_count":1,"received_data":682,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.forms.office.net","ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1994-11-14","domain_rank":48784,"first_seen":"2019-09-01T22:35:09Z","last_seen":"2025-09-30T08:40:00.074486Z","alert_count":0,"request_count":18,"received_data":2921747,"sent_data":8603,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"eur03.safelinks.protection.outlook.com","ip":{"addr":"52.102.115.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-08-18","domain_rank":75359,"first_seen":"2017-01-30T07:13:43Z","last_seen":"2025-09-30T13:11:18.624295Z","alert_count":0,"request_count":1,"received_data":71506,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"c.office.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1999-04-20","domain_rank":155096,"first_seen":"2018-10-10T06:15:25Z","last_seen":"2025-09-23T20:52:23.152973Z","alert_count":0,"request_count":2,"received_data":1692,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9268481b58d011d35f158b5e85aaea86","sha1":"1230021c16f9efd225696f81b3537bf5890bc4c2","sha256":"0c5a268411fdd0041886fa3de4729d98a8081b06402217caac00d480ad2f2653","sha512":"52f9c1f0374bd5a5fa846d38e1aee631e4856e070942baa4668e123f6155b58bccca9cd28189d6f1d98f67fe9147a8fb320a45ebe781e0d5656e41410c3182a8","ssdeep":"","tlshash":"cec0924548652241e4a3b8243b1713047b9446339ce2ee257b5e160a6faa8af4be078c","size":180,"data":"","first_seen":"2025-10-01T07:38:25.939959Z","last_seen":"2025-11-21T15:09:45.375389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/dll-dompurify.min.ea88d58.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd5432d1b4c2cfd35b02089f5f50141","sha1":"8386a842d6f088477eb77f51d22617cb48cc4c60","sha256":"72abd4b9f2809054d0f0c0634a73e5bbccbdbbcbdc1fe436e3ff09b05b9945d4","sha512":"8d712e0547551d621f1b826333fe3cf17d0a4a55b2bbfb4f65cc4fd09d4c0689d3a6d64945174064814382567eb193bf34dd2bea34d3c0e7ca3143589073fd37","ssdeep":"768:rof57y3/9g570sl6SLaAbgyI1GTBqgrbpXpzd03eWjW8iQa9lCi/LnTnov8UMSjA:rA57y3/9g57/aAlp3pXpzo8mjf/YgN1G","tlshash":"51130729b525ac730be601e8407f960ee238146bb015c8e8fadddcf61876d466127f3b","size":44016,"data":"","first_seen":"2025-03-21T15:57:57.913787Z","last_seen":"2026-04-02T08:14:55.437316Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_saveresponse.95c5dc0.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cfc8a018cf3feccf2c1b28b3bdba1e1","sha1":"5d0c9bb552d4f079ed8a8f99ceeb844b572da5e7","sha256":"60cbae6bd93cef7b19c2f48ecfc4df878fe7a6c1d6c9afa563c7f071dbd0d519","sha512":"def3007af69183e0daf3016693435f065a91edecd197b3f0ca788c58359774d48a70ab56dabc54e9bb3cc3d67355569f7991c449a77b92c09feb94d3430bcff9","ssdeep":"768:rV/ExMY75PO2OeoU1mZMvEJAeFCbi9hqS9C:r1ExMY1QxamWaABbi9hqS9C","tlshash":"71e2e8a9fec4700c321f6056413f150cf3aa69587e2e4d50f168e898bd75e8da623fac","size":32572,"data":"","first_seen":"2025-09-30T15:27:00.909265Z","last_seen":"2025-10-15T07:53:27.887305Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_post.boot.e32e3e1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b946e4dafb90c6a9e60da6cc5421bdf","sha1":"b76e178ce1c9ebd33ec4b218e8a1556f6ae2c11b","sha256":"a2db34f61d14bf751c68679aadd1a8a58967221d1ba48b17f5fc5432a7715fe8","sha512":"c9907957c44bd04d6dee06c3ac6230508eec6f64fb14d5f88033b2aaf9dacbd9d522f7fa77db730d6f3ca7f8c47c11dcd5ab2150aae44b85a1c5445a4bfaf004","ssdeep":"192:SyWY7pvB2//7WBOJdvjQxE6UmSiq8qJ4yVJXIeuchHYfy9SlP6GwK:SyWQpvlWvVJ4SJXIeuchHGlr","tlshash":"7862b685bcd0b019a22b21abd03f060df2262f46892d8e91f055ec987d74adf9136fdc","size":15572,"data":"","first_seen":"2025-09-30T15:27:00.901994Z","last_seen":"2025-10-15T07:53:27.856769Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/ls-response.en-us.0b110d0a5.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"697c1dc56b971a7357ec9a968e0fb4d9","sha1":"d429d9618382de8f1d27cb8579ba24b3a14493b0","sha256":"edc282d71e369ab590c84c3faa092b53d29efb6ffc1b58f17c955082a2cda346","sha512":"1b20cdf85bae7be13ccdc57c7db7fb70e6f8822430a054523ed99a151826dd804f265d838d27f453ba6abd2805f142f23a736a2dbe499f9a6a797e2ee38c92aa","ssdeep":"768:ZCzfymM8C/I9ujl4wRsQuhl9deQ0NR4a9WGYO6qOegHUUVd2lHE1D43VRxk:ZNRA9+46shl9deQ0NR4a9WGYOVOJHUEF","tlshash":"d0e2c61fd78511360b9212c27ccf6f96b79d52793384672b582c416c03e9b9ea32b7d8","size":33702,"data":"","first_seen":"2025-09-30T15:27:00.91286Z","last_seen":"2025-11-24T18:28:27.259674Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cffc0c1b8b6eccc4b4679067609a5ab","sha1":"e3fe7dc00151e39903d926f4dfdd4db4dc34cebb","sha256":"68e79ec34607d68de99327e50657ae672791751b05375d0d3b0820d04fe7e55e","sha512":"d55fead58e2049cc70037365f05b9206e178cd11d26af90d3145e4be86fc4544f961309f1180f17a674d8ea4856079ef7ffb2b811d4ddb570fcafbd19e647a6c","ssdeep":"","tlshash":"ad21928f0aa760fd50a7a0350ffe5418137485033509ea063d3c6765df94e649bf1f65","size":1137,"data":"","first_seen":"2025-03-13T08:24:14.90326Z","last_seen":"2026-04-03T15:49:41.824012Z","times_seen":806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31fac3fb12f0287293a8ecb8cb673de6","sha1":"f506c3b11469aaa47cfba9be006237ea88482a5d","sha256":"598d010532476403b844bae97f85cec2332070d4357b8b0462ae19b94b695f13","sha512":"2a947606f307a104ed0b6f941422677ce36987eb6b121f107f04c3c9f42e5ca134cc39a8eae2f5f1dd0b0f1330ceaeb93ec0bdbde917c2e2e8b412a962c6f7c6","ssdeep":"","tlshash":"a8f0220a8a74086702119339a91a3123ab6514432d287d31bb4c8618af0ca1f12f8be9","size":642,"data":"","first_seen":"2025-03-11T12:21:07.495966Z","last_seen":"2026-04-03T15:49:41.824784Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c2bae7b95e0e4804491fe9bea416bc0","sha1":"955b6a3e256ba651fcda0e6b93fa32d3c65aa20a","sha256":"457a8b075b1fc1bd80f7662360113c1af4fc1590620905efe1ff45378a465d29","sha512":"2c77dd30f80677cfc166b52f2a7da51144b9803a2a91ca1d85f5fc17bbd679104045ba956c55a745461906b1020b4c2140a04b5393dd9e03419186ce5a419376","ssdeep":"768:brtOfe162M1anq5l5d/l5Q5C5n5E5+5l575V5L5w5W5P5A5U5P5v5q5F5wBR/n4l:bpOfe1i1anq5l5d/l5Q5C5n5E5+5l570","tlshash":"d7033e4d49082f732fe84ec9fea35e1d1ef964d331b40b7090aaab097d34785172a65a","size":39556,"data":"","first_seen":"2025-10-01T07:38:25.950471Z","last_seen":"2025-10-01T07:38:25.950471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6ea7cfa144c7aae018e371b8713799e","sha1":"5e597c394052a32c8d38180a19697636f32858d8","sha256":"c4762261fda1244a79968237321ac93f49980d7e8a8159091bf461d7c85b9d80","sha512":"3d7f359fb804c5b8d1fa016b25b433be42b0a962f2467543f8e110a609ee3bfe8be9183efdcbdaedb56c6e67928e58572fca7e5fca5bdb94515bbe1cd0cfaf1d","ssdeep":"192:NN6CyuVpKRq9y8+TxGofP9EAObIi2APs0HPgw3QADmJAUXoCYMO56ylsk:nZVcRq9r+dd9E3KCvRaFY3MSlt","tlshash":"1c42f8c8b6e1b05a4793a1b2c0bf104bf17565241c9d8870f055f8e62e7d7ad932bfa4","size":12971,"data":"","first_seen":"2025-09-24T12:14:40.027877Z","last_seen":"2025-10-06T17:23:45.195587Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62150ad2f412138daa543e08f4cfd3f8","sha1":"5265abbae047f25e40df478e2fb22ac033172d14","sha256":"7555077d1ccbeb8c46b46e50b6876114d9f6490223963edaa60e8d55c4fa457f","sha512":"6c34f5c8624abcfe71c6a3777f30295a4dbb3acfd2bb6f223876ee1ee9bfcce9237f0e0a816b73b2e8952bc274c6299e006a9afcb49cfa6c0308b61b22edb9db","ssdeep":"","tlshash":"399000ba0820332008a2308aab8b320238028c20c0c028008ea0083c3a3088fcb80b80","size":50,"data":"","first_seen":"2025-03-13T08:24:14.94385Z","last_seen":"2026-04-03T15:49:41.828196Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.sw.a912249.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd81c01d8a77280c7a50f5d407d9d88f","sha1":"772d84eae30e3ab07b96f259dbbd96c1cb3cac0e","sha256":"b59acb533c93cc20a5ef0dde32ff74743d182803a3ede78f69aedaf953b09817","sha512":"cf8549e78b28c3dbdbb40a30aee160afacff1a7f5975cc74a91b745e40ee79caae152f2e42157d8316637a60769659e45e3acd2dfd05233051f84bf8c3f838f7","ssdeep":"","tlshash":"7121f1cafdd3e4fb3aaba5ed8c3b4145717b3911e60e1509f7318ac22c638589433994","size":1152,"data":"","first_seen":"2024-12-02T04:20:39.912143Z","last_seen":"2026-03-06T12:22:44.228983Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_ext.6fff4c6.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2b71907dbbeede950f479f62c03da0f","sha1":"a29362bc5c049e12de0462833d6a99db5ec31754","sha256":"178223a1ba3b0f03ef0fcd624e6e461937150d91fb0992ac42811019ea3d8e13","sha512":"37ca14687246a4e3a47727a8442adcb8e64bb98f0b45bb7f491fcdf2da02a6f556438f5f4eec0bc6b9b3963069a1c34bc3301f705cdaf3f59e1504eaca53157a","ssdeep":"6144:ilFIOY4jr8mEtDIswLdzlSab/tA2V7Am2AdZKX+dT/mOH:KCkr8FHKdzkqKK7/2GmOH","tlshash":"19c42cd8b3d5b0ac528b93be813f150df37b3a59755a8840e1b4dc89b834dcca52bb58","size":555022,"data":"","first_seen":"2025-09-30T15:27:00.91516Z","last_seen":"2025-10-06T17:23:45.172653Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://4619c593-5640-4563-9e8f-573018096c29/injections/js/bug1731825-office365-email-handling-prompt-autohide.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"7c873167b5d35fd9f6690071701d4669","sha1":"f897afe9818a00a80e98bdbc67e7f67343f89378","sha256":"014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a","sha512":"85f4b41add3c875f2d15feb5d8684c371dd19839e8c711f8570dc0eeab82faf5374373d350d82f3c0dc62316db450ed3e67c0b01537f6081846b8cc777090994","ssdeep":"","tlshash":"3e1102dfa4a32253142200fd2b4b6885d1bf89167338d5c5754ac2603fa044e53fadca","size":995,"data":"","first_seen":"2023-04-11T22:15:44Z","last_seen":"2026-04-04T16:31:04.160126Z","times_seen":65427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c921cee04cdec6f592537b839fc1d653","sha1":"e8e8ac456a9f0286f0df5bebb00cfd0a1a4e2deb","sha256":"452c634c9c26f60a3e9aa286db3f082d70a48c26eda6e169d314deb65f72b06c","sha512":"39ad02d2870eafd0a948c98dbaa57e8f172347f57312d11e86126ec830807eac6210f3a59a86264ff3bd71746f8c480e11c2f24d625d7c6365eaa89123856924","ssdeep":"","tlshash":"05e02e3a6aa009701313fc22028ea3012636000b3428ac10bd1c67050f50e400ce2eca","size":304,"data":"","first_seen":"2025-03-13T08:24:14.951355Z","last_seen":"2026-04-03T15:49:41.82892Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.utel.7511518.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fdf2bd9de45f4c641689d51cf63b27e","sha1":"c26fe88f7e90c5649338e760b3d8a90160e43d36","sha256":"787dbcafc49171f6b698fbfe601eb58e5f56308831d21fb4441916705571348b","sha512":"8f41fdb98c2a5578e34a35fd905f8ffcb06a64d64a5dd6f65d00c1d2a1961fe4ff5e65caf455f907f68520697bc685b36db58ebee969351b79db1f0b8224fd76","ssdeep":"1536:brsYZ3z5b7pimLVw1xJIjQtzek3tdkDf10I1NVwwSx:bxxz5rw1xWio0IpwNx","tlshash":"78d3f7ddf5c2785a47a331b640af108fba7e2cd2049c5924e242fac67cb902d9597f9c","size":139821,"data":"","first_seen":"2025-09-24T12:14:40.000636Z","last_seen":"2025-12-17T09:29:19.878783Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.msal.7a9e5dd.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d3b3ac178a0db95bdcfb07df2111ee1","sha1":"30c2cc1ef15d95d7c2a778b58478d8e9d6de34a2","sha256":"64eade5289e873b773452efc0a6c72d6e55035c4481ac49a0ec384f8ef9d3606","sha512":"953a1d459fb96494812028b8eaa662b015c5bcb962b858d0a37dbad61f7fd446387737228d2c4e593486a8b86db0bc8f940de6c79ca65a2a50b11dd071f2efa6","ssdeep":"6144:c2fmV+zW/Fj5b9AbdPYxXiaaBhloMzIMJ3JVdjuvkYx7wYjbpRK28:c2fmV+zMb9S56u3/d6RdRK9","tlshash":"f6941885b3d77027a7a9117ee4762311b3386584680e406dfbf879ca3c62543a37bb78","size":426415,"data":"","first_seen":"2025-09-26T20:35:13.671363Z","last_seen":"2025-10-21T10:14:42.876545Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"205ede73e70256efe23e45716710bcf4","sha1":"930d41c7f1d80e19dc8399143211b60decb65ef5","sha256":"975d1a10d7c135ab5ddd0353c349478cb66a2681985135deaee848d5fa491919","sha512":"cdabad8452df5d95660fba23b2d04cf3d8b687941bac1235f42804fe2d7718970bb36ac3e49af4fb648054d756740ebdef7871a7dc3635b34b24f7c808fdb232","ssdeep":"","tlshash":"e2d0c77b4e11d13c35742147d677e77531c31f5903115d4540cd6956362150f9c0ba51","size":203,"data":"","first_seen":"2025-03-13T08:24:14.957831Z","last_seen":"2026-04-03T15:49:41.829643Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.min.d0eed7c.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8548a598d29a899654aec7d2835a1951","sha1":"e3b1e410ca9f14a910152e275f5af96ccbbf0ad3","sha256":"db05a9ba937022961f50d9d72169bbbf623c4caa7f6c58cdc4ea62bbbb402bd7","sha512":"4fa69e8ee0cb95299dbd1ed1ad6578291521a4325f54ddea68abb14e256bf6ddb9a1578edb33e49d6e8b422907c2431d4def998f6d338d98233ed11b71684061","ssdeep":"6144:wVzUEe//8G4MYyYoOxUwgQrANExAjME15Oydock:dM8uMNnME18ydu","tlshash":"56b4c6dcb9d2f019135760b6807f110ef33e2a9468ad1850e1a2e8e97d78a8dd533f9d","size":498541,"data":"","first_seen":"2025-09-30T15:27:00.914173Z","last_seen":"2025-10-06T17:23:45.133148Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_copilot_common_license.22a62d1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1334c63e234e435abb912d0f13338078","sha1":"59f398bded1979ab0f8fa8fba3ed472b9dd3ec3f","sha256":"7f959eff0b83e059c5e8ab2ec971d2ec77f578ca23b4e880083958d11a494778","sha512":"142267166e2ef5cc2d7ca105fabeedd7d439fd4ef72d9839e371c6e6495b919eed9b336bebe0c89e9f20c74e52afae8574d52d922f994a62e317d0e851537bcf","ssdeep":"384:I0/5ae7aYPhjhXWTktc8cMn7Jl7xUXxictOk3Jj/BiyBfILU3BwyOs6VZvHLypHg:K3SnyBbB5l9pJH7h25t","tlshash":"23b274c9f6c3b01a5397a2ec907f144ab13d6d4518ae9900f222e5d27c7969de033fe9","size":23736,"data":"","first_seen":"2025-09-30T15:27:00.904159Z","last_seen":"2025-10-15T07:53:27.832944Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7ce5a64440a48cc38d3e8b693b21b92","sha1":"d0073a3720d4ff1997e7b66929ab5781c30710f1","sha256":"48ba7b2de3e61cfa1c6a235ec087aee07731d128e8b8f7f84168d89db88df4a1","sha512":"d5b2f38e883eca27a381bf3c8a77474172c5db23247520ae57f138090086a10ebb44cb684e11c221fe54a05f37b8798a727167300879628081fe4028a2571307","ssdeep":"","tlshash":"fb9002bd4922025644e1715a461611d0d4028a225cc558015966951635a050bc7d569a","size":53,"data":"","first_seen":"2025-03-13T08:24:14.974272Z","last_seen":"2026-04-03T15:49:41.831116Z","times_seen":803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34a50217648495584755e79afba16ad2","sha1":"8beb8224259622448ceba5933febced43d13da8a","sha256":"4db396b92879c0e5eba590baf92d95a5ed65cbb9fe045e6bccfe5bd20d466c67","sha512":"3972f223c77dddb252adc0b27305655284190b52f0240e2d30b4600bcc6c9b180992f3294e537393456821a75ad24fc3dc8a6d38939adb77fa6e0b31910ac935","ssdeep":"","tlshash":"ab9002bd4922023144a1605f4e1215d054038d235cd559015966552639a051bc695259","size":52,"data":"","first_seen":"2025-03-13T08:24:15.011676Z","last_seen":"2026-04-03T15:49:41.831771Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-01T07:38:00.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forms.cloud.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 11 Sep 2025 02:16:21 GMT","end":"Tue, 10 Mar 2026 02:16:21 GMT"},"fingerprint":{"sha1":"FC:42:2A:19:B7:A3:DD:C6:DF:D6:3C:A1:F3:71:91:4D:2A:DE:C1:9D","sha256":"83:EF:57:EE:AD:69:DE:45:69:54:F6:73:44:E1:A4:24:24:56:30:3B:DA:6C:F3:20:18:33:E2:7E:1A:B6:9E:C6"}}},"request":{"raw":"GET /pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl HTTP/1.1\r\nHost: forms.office.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nexpires: 0\r\nvary: Accept-Encoding\r\nset-cookie: FormsWebSessionId=63b4b7db-03a8-40af-a844-f68898ad8f83; max-age=2592000; path=/; secure; samesite=none; httponly\n__RequestVerificationToken=XgfMPaZj3FjTTKHJDRK0o9mZDNhOihP3NGeuwHXuuoCZ4QJ1JyqB4y_KchmMWLnbAEXfqBWahL_FxSyvQUbKd21B8RCXrRRdVXl2LuamhdU1; path=/; secure; samesite=none; httponly\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-routingofficecluster: neu-101.forms.office.com\r\nx-routingofficefe: FormsSingleBox_IN_12\r\nx-routingofficeversion: 16.0.19324.42052\r\nx-routingsessionid: d5cd4d01-cfbd-441c-8dbc-24166265a6c5\r\nx-routingcorrelationid: fddb9783-6959-4e97-a5a1-6972fba771cf\r\nx-correlationid: fddb9783-6959-4e97-a5a1-6972fba771cf\r\nx-officecluster: neu-101.forms.office.com\r\nx-officefe: FormsSingleBox_IN_12\r\nx-officeversion: 16.0.19324.42052\r\nx-usersessionid: d5cd4d01-cfbd-441c-8dbc-24166265a6c5\r\nreport-to: { \"group\": \"endpoint-1\", \"max_age\": 108864000, \"endpoints\": [ { \"url\": \"https://csp.microsoft.com/report/Forms-PROD\" }] }\r\ncontent-security-policy: object-src 'none';script-src 'nonce-b95835fe-6e2f-4abd-ba64-d3c1d885ae57' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;base-uri 'none';require-trusted-types-for 'script'; report-uri https://csp.microsoft.com/report/Forms-PROD;report-to endpoint-1;\r\nx-robots-tag: noindex, nofollow\r\nlink: \u003chttps://cdn.forms.office.net\u003e; rel=preconnect; crossorigin=anonymous\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: D4D6DC5599E740749ED137DD9FEFD006 Ref B: SVG20EDGE0118 Ref C: 2025-10-01T07:38:00Z\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70062,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35153), with CRLF, LF line terminators","md5":"eac76c1765c69677dbd5b68f5752f65f","sha1":"7123c1a684938ae3d12332ad68d381cb013a265e","sha256":"b370e730351578463e364ba52b3d3bf615b054c1da69c9dcd50a6338e0c5a886","sha512":"6c73f59e3c4ece0e1a564d199dd4fb064a18f59ad1546da307b60063087cb32e6dc4e0bda25850a5b651bda735f146644cbe7b0dea3f903188dda4f0383f1d9e","ssdeep":"1536:Faqm4pOfe1i1anq5l5d/l5Q5C5n5E5+5l575V5L5w5W5P5A5U5P5v5q5F5UR/4Ox:F3T1iYqjvN+o9iAXh3dio9qmhVkTcqOl","tlshash":"e363941c0a406f3fd7a24dd9fd66690d5af829d730780632f06dd694af34b6e832ba05","first_seen":"2025-10-01T07:38:25.86586Z","last_seen":"2025-10-01T07:38:25.86586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_saveresponse.95c5dc0.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_saveresponse.95c5dc0.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 9130\r\ncontent-type: application/javascript\r\ncontent-md5: mTCqAF3s8YaeBZxAEXzt1Q==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7A44FAF\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 34a37297-001e-0066-16a4-2e1811000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":32572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32310)","md5":"4cfc8a018cf3feccf2c1b28b3bdba1e1","sha1":"5d0c9bb552d4f079ed8a8f99ceeb844b572da5e7","sha256":"60cbae6bd93cef7b19c2f48ecfc4df878fe7a6c1d6c9afa563c7f071dbd0d519","sha512":"def3007af69183e0daf3016693435f065a91edecd197b3f0ca788c58359774d48a70ab56dabc54e9bb3cc3d67355569f7991c449a77b92c09feb94d3430bcff9","ssdeep":"768:rV/ExMY75PO2OeoU1mZMvEJAeFCbi9hqS9C:r1ExMY1QxamWaABbi9hqS9C","tlshash":"71e2e8a9fec4700c321f6056413f150cf3aa69587e2e4d50f168e898bd75e8da623fac","first_seen":"2025-09-30T15:27:00.909265Z","last_seen":"2025-10-15T07:53:27.887305Z","times_seen":54,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.sw.a912249.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.sw.a912249.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 577\r\ncontent-type: application/javascript\r\ncontent-md5: L1zFJrtFzmG+HQztIPfeAA==\r\nlast-modified: Thu, 05 Dec 2024 04:53:32 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD14E8C4D0E066\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: cedcbf4f-001e-002b-53ef-46d7fd000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (918)","md5":"bd81c01d8a77280c7a50f5d407d9d88f","sha1":"772d84eae30e3ab07b96f259dbbd96c1cb3cac0e","sha256":"b59acb533c93cc20a5ef0dde32ff74743d182803a3ede78f69aedaf953b09817","sha512":"cf8549e78b28c3dbdbb40a30aee160afacff1a7f5975cc74a91b745e40ee79caae152f2e42157d8316637a60769659e45e3acd2dfd05233051f84bf8c3f838f7","ssdeep":"","tlshash":"7121f1cafdd3e4fb3aaba5ed8c3b4145717b3911e60e1509f7318ac22c638589433994","first_seen":"2024-12-02T04:20:39.912143Z","last_seen":"2026-03-06T12:22:44.228983Z","times_seen":520,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odc.officeapps.live.com/odc/v2.1/federationprovider?domain=15813f7f-44bc-4e8f-bab1-29b341c4f66f","fqdn":"odc.officeapps.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"52.109.68.130","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"odc.officeapps.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 16 Sep 2025 22:04:11 GMT","end":"Sun, 15 Mar 2026 22:04:11 GMT"},"fingerprint":{"sha1":"3E:5B:98:A3:7E:AC:6E:5B:C1:72:53:2F:11:11:14:5A:18:04:87:D6","sha256":"ED:FF:1C:F6:07:90:79:F5:6C:28:A0:54:58:FC:67:0A:EE:C3:04:3F:4C:B0:9E:A4:1D:73:F6:85:34:E8:20:B9"}}},"request":{"raw":"OPTIONS /odc/v2.1/federationprovider?domain=15813f7f-44bc-4e8f-bab1-29b341c4f66f HTTP/1.1\r\nHost: odc.officeapps.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: enlightened-hrd-client,hrd-prefer,x-correlationid,x-office-application,x-office-platform,x-office-version\r\nReferer: https://forms.office.com/\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: private, max-age=2678400\r\nvary: Origin\r\nserver: Microsoft-IIS/10.0\r\nx-correlationid: 93045b15-0a8b-47f1-a2c2-556176840291\r\nx-usersessionid: 93045b15-0a8b-47f1-a2c2-556176840291\r\nx-officefe: OdcFE_IN_74\r\nx-officeversion: 16.0.19319.30551\r\nx-officecluster: frc-000.odc.officeapps.live.com\r\ncontent-security-policy: script-src 'nonce-8F9T7l9q1tVDaNxyjjGOFKz0PbDWhWkjcxpneM4kdJwt87FCvTlze6SNBsyEFpMtIKyGCLlehUlgOjzSHNdmakY2vLrLnmyx9nnMm7P72/wH2upwowFdZMX3fg1lU2+t6Fm1VZZd+QmMhuEzymU340mvW3B/jBw3cg5REkZocog=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; base-uri 'self'; object-src 'none'; require-trusted-types-for 'script'; trusted-types default dompurify; report-uri https://csp.microsoft.com/report/OfficeIce-OfficeDiscovery-Prod\r\np3p: CP=\"CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR\"\r\naccess-control-allow-origin: https://forms.office.com\r\naccess-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client,HRD-Prefer\r\naccess-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After\r\ntiming-allow-origin: https://forms.office.com\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-max-age: 600\r\nx-aspnetmvc-version: 5.2\r\nx-aspnet-version: 4.0.30319\r\nx-ua-compatible: IE=11\r\nx-powered-by: ASP.NET\r\nx-content-type-options: nosniff\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":62,"dns":3,"connect":27,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.msal.7a9e5dd.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.msal.7a9e5dd.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 81849\r\ncontent-type: application/javascript\r\ncontent-md5: ZDq/GxrXnYoH4wOb5mU1LQ==\r\nlast-modified: Thu, 25 Sep 2025 05:08:38 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFBF196A3D476\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 1243345b-801e-0078-22e3-2df4c9000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":426415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14356)","md5":"4d3b3ac178a0db95bdcfb07df2111ee1","sha1":"30c2cc1ef15d95d7c2a778b58478d8e9d6de34a2","sha256":"64eade5289e873b773452efc0a6c72d6e55035c4481ac49a0ec384f8ef9d3606","sha512":"953a1d459fb96494812028b8eaa662b015c5bcb962b858d0a37dbad61f7fd446387737228d2c4e593486a8b86db0bc8f940de6c79ca65a2a50b11dd071f2efa6","ssdeep":"6144:c2fmV+zW/Fj5b9AbdPYxXiaaBhloMzIMJ3JVdjuvkYx7wYjbpRK28:c2fmV+zMb9S56u3/d6RdRK9","tlshash":"f6941885b3d77027a7a9117ee4762311b3386584680e406dfbf879ca3c62543a37bb78","first_seen":"2025-09-26T20:35:13.671363Z","last_seen":"2025-10-21T10:14:42.876545Z","times_seen":73,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/images/microsoft365logo_v1.png","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /images/microsoft365logo_v1.png HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 5895\r\ncontent-type: image/png\r\ncontent-md5: MRJ0yMnGbolPWvpR+s1yzQ==\r\nlast-modified: Thu, 05 Dec 2024 04:52:58 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD14E8B0582866\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 24397b62-b01e-0001-72ef-4608ed000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":5895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 490 x 180, 8-bit/color RGBA, non-interlaced","md5":"311274c8c9c66e894f5afa51facd72cd","sha1":"386d1fa0b2924df2c21545cf2ff1dde2cd985d33","sha256":"bc3c029408dab6b5cb676b990b2e21bdd474e4b2e45daf87e70210539390bf49","sha512":"2117bc16ac878bcc307cea0defa0638800715330e83e9c8c1cad7398bbf207e9432391b851e004308fb75c20c2d6f587d015fa3fb13f8630fe3e0c7e194979fc","ssdeep":"96:n40H7NhvmuFFBL413wHGfZ1rsrohnXcF1BN8+PrfUFd0abvPsrXf:nbRFmuxcJfLrvnXcFjNRUFd00Wv","tlshash":"c6c15d46af1fc12cd926a63a3122494dd45f65d3d1caf1ef9ba1bbf3815e04091e811b","first_seen":"2023-08-31T11:49:33Z","last_seen":"2026-04-03T15:49:41.815615Z","times_seen":959,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.min.d0eed7c.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.min.d0eed7c.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 131198\r\ncontent-type: application/javascript\r\ncontent-md5: 1F0EcEj/YQHFJ4f8BosvdQ==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7BED8A9\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 11535b91-d01e-0017-0ea4-2efe3a000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":498541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39143)","md5":"8548a598d29a899654aec7d2835a1951","sha1":"e3b1e410ca9f14a910152e275f5af96ccbbf0ad3","sha256":"db05a9ba937022961f50d9d72169bbbf623c4caa7f6c58cdc4ea62bbbb402bd7","sha512":"4fa69e8ee0cb95299dbd1ed1ad6578291521a4325f54ddea68abb14e256bf6ddb9a1578edb33e49d6e8b422907c2431d4def998f6d338d98233ed11b71684061","ssdeep":"6144:wVzUEe//8G4MYyYoOxUwgQrANExAjME15Oydock:dM8uMNnME18ydu","tlshash":"56b4c6dcb9d2f019135760b6807f110ef33e2a9468ad1850e1a2e8e97d78a8dd533f9d","first_seen":"2025-09-30T15:27:00.914173Z","last_seen":"2025-10-06T17:23:45.133148Z","times_seen":13,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":39,"dns":21,"connect":2,"send":0,"wait":1,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/images/favicon.ico","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7886\r\ncontent-type: image/x-icon\r\ncontent-md5: lCXY6TE6aSuz8CLoBV+rgg==\r\nlast-modified: Thu, 05 Dec 2024 04:52:57 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD14E8AFDD64E1\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 49637dbb-901e-0064-05ef-46a6a9000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":7886,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"9425d8e9313a692bb3f022e8055fab82","sha1":"eddcf3ea767d4c3042d01ac88594d7e795d8615c","sha256":"f2a1abcf12ebd0f329e5b66b811b0bd76c8e954cb283ce3b61e72fbf459ef6f1","sha512":"93b3eb3c4ce385d80d4a8f6902355bbd156ac1aa20b8869af05c8e714e90e74c5630bb8de34d5b8fc9f876ac44be314f3a2a08b3163295adadbc6dd7b8d23561","ssdeep":"48:gzeweweQeQeQe2eWe+RjvChvL42Kcb/M96GgEfY86d:pNNttt3X8upiJvQFd","tlshash":"37f10909fa4c79bef161b239a838928d125c6d24b1510183e5bfeedfd5ae1f4801e1b7","first_seen":"2023-04-24T19:58:05Z","last_seen":"2026-04-03T15:49:41.80535Z","times_seen":1260,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.office.com%2Fe%2FNHykLchTCF\u0026data=05%7C02%7CTony.Cutajar%40gallifordtry.co.uk%7Cc6325af26fd748ba172908ddf51d125a%7C15813f7f44bc4e8fbab129b341c4f66f%7C0%7C0%7C638936227450795993%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=1tXbgo3KrGjJT8dSnGgzInVn2bxGLTH49V77xgG2TLc%3D\u0026reserved=0","fqdn":"eur03.safelinks.protection.outlook.com","domain":"outlook.com","tld":"com"},"ip":{"addr":"52.102.115.79","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-01T07:38:00.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.safelinks.protection.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Sat, 28 Jun 2025 22:24:27 GMT","end":"Tue, 23 Jun 2026 22:24:27 GMT"},"fingerprint":{"sha1":"39:BD:27:EA:F8:8A:0E:D8:CB:7D:F6:49:53:A9:54:5F:D6:39:CA:F5","sha256":"77:44:06:38:A2:32:5A:48:AF:0B:66:3F:5B:E0:6E:4B:D4:A6:A6:35:2D:BF:BB:4F:0A:20:81:8D:3C:AC:FF:F5"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fforms.office.com%2Fe%2FNHykLchTCF\u0026data=05%7C02%7CTony.Cutajar%40gallifordtry.co.uk%7Cc6325af26fd748ba172908ddf51d125a%7C15813f7f44bc4e8fbab129b341c4f66f%7C0%7C0%7C638936227450795993%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026sdata=1tXbgo3KrGjJT8dSnGgzInVn2bxGLTH49V77xgG2TLc%3D\u0026reserved=0 HTTP/1.1\r\nHost: eur03.safelinks.protection.outlook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: private\r\ncontent-length: 154\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://forms.office.com/e/NHykLchTCF\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-msedge-ref: MIRA: 3ee37487-7b01-59a6-7734-b0b180e04c15 OS6P279CA0088 2025-10-01T07:37:58Z\r\nx-nanoproxy: 1\r\nx-aspnet-version: 4.0.30319\r\nrequest-id: 3ee37487-7b01-59a6-7734-b0b180e04c15\r\nx-proxy-routingcorrectness: 1\r\nx-aspnetmvc-version: 5.2\r\nx-backendhttpstatus: 302\r\nx-content-type-options: nosniff\r\nx-proxy-backendserverstatus: 302\r\nx-robots-tag: noindex, nofollow\r\nx-safelinks-tracking-id: 00c88235-d4b4-4493-813b-08de00bd7261\r\nx-serverlat: 80\r\nx-servername: DBAEUR03WS083\r\nalt-svc: h3=\":443\";ma=2592000,h3-29=\":443\";ma=2592000\r\nx-serverversion: 15.20.9182.013\r\nx-sl-geturlreputation-verdict: Good\r\nx-ua-compatible: IE=Edge\r\nx-feserver: OS6P279CA0088\r\nx-firsthopcafeefz: OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nms-cv: h3TjPgF7pll3NLCxgOBMFQ.1\r\nnel: {\"report_to\":\"NelOfficeUpload1\",\"max_age\":7200,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeUpload1\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://exo.nel.measure.office.net/api/report?TenantId=\u0026FrontEnd=AFD\u0026DestinationEndpoint=\u0026RemoteIP=82.148.169.0\u0026Environment=MT\u0026HttpStatusFrom=BE\u0026ServiceName=MIRA\u0026MiraPartnerName=MiraEOP_EOP\"}],\"include_subdomains\":true}\r\ndate: Wed, 01 Oct 2025 07:37:58 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":70062,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":9,"dns":1,"connect":2,"send":0,"wait":167,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_cover.1d0031a.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_cover.1d0031a.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 18317\r\ncontent-type: application/javascript\r\ncontent-md5: xMh04M3oReGhn9B5GieXFg==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C79DC0F8\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 9ec203e0-b01e-003e-38a4-2ec04e000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":73103,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c8b8a4154cd6b06fdbf220db68dc6f4c","sha1":"6cd1df3495693657b5ec27380af1d7a286a86219","sha256":"15e2d13c8c2cf5b9258dcd3899791f11776c1e09a46e3bc2ddec509455c1937f","sha512":"e711af5e33d01ac4005d893ceae05b2c7eb1fedf9fdb98293363911204561586d0c333013d15b88718df53fceaccbd49a87b00cff045263a30739c29f972e4f6","ssdeep":"768:sTroFgRDNGgbtHsW8Zp3aN7l2YYYWiRwk2bowySATG1HxQyc3nP5gQvc19djGiss:Y/rBd2ro1b3P08gSvozePi","tlshash":"db63faec77863144329b292a103f1a0df33eea44b95a4f15f339b8c526e8d496637f58","first_seen":"2025-09-30T15:27:00.916268Z","last_seen":"2025-10-15T07:53:27.851057Z","times_seen":54,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_saveresponse.95c5dc0.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_saveresponse.95c5dc0.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 9130\r\ncontent-type: application/javascript\r\ncontent-md5: mTCqAF3s8YaeBZxAEXzt1Q==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7A44FAF\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 34a37297-001e-0066-16a4-2e1811000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":32572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32310)","md5":"4cfc8a018cf3feccf2c1b28b3bdba1e1","sha1":"5d0c9bb552d4f079ed8a8f99ceeb844b572da5e7","sha256":"60cbae6bd93cef7b19c2f48ecfc4df878fe7a6c1d6c9afa563c7f071dbd0d519","sha512":"def3007af69183e0daf3016693435f065a91edecd197b3f0ca788c58359774d48a70ab56dabc54e9bb3cc3d67355569f7991c449a77b92c09feb94d3430bcff9","ssdeep":"768:rV/ExMY75PO2OeoU1mZMvEJAeFCbi9hqS9C:r1ExMY1QxamWaABbi9hqS9C","tlshash":"71e2e8a9fec4700c321f6056413f150cf3aa69587e2e4d50f168e898bd75e8da623fac","first_seen":"2025-09-30T15:27:00.909265Z","last_seen":"2025-10-15T07:53:27.887305Z","times_seen":54,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odc.officeapps.live.com/odc/v2.1/federationprovider?domain=15813f7f-44bc-4e8f-bab1-29b341c4f66f","fqdn":"odc.officeapps.live.com","domain":"live.com","tld":"com"},"ip":{"addr":"52.109.68.130","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"odc.officeapps.live.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 16 Sep 2025 22:04:11 GMT","end":"Sun, 15 Mar 2026 22:04:11 GMT"},"fingerprint":{"sha1":"3E:5B:98:A3:7E:AC:6E:5B:C1:72:53:2F:11:11:14:5A:18:04:87:D6","sha256":"ED:FF:1C:F6:07:90:79:F5:6C:28:A0:54:58:FC:67:0A:EE:C3:04:3F:4C:B0:9E:A4:1D:73:F6:85:34:E8:20:B9"}}},"request":{"raw":"GET /odc/v2.1/federationprovider?domain=15813f7f-44bc-4e8f-bab1-29b341c4f66f HTTP/1.1\r\nHost: odc.officeapps.live.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://forms.office.com/\r\nX-Office-Platform: Web\r\nX-Office-Version: 4.23.1139\r\nX-Office-Application: 171\r\nX-CorrelationId: 6821681c-c7db-46d8-adae-77dd9687745f\r\nEnlightened-Hrd-Client: 1\r\nHRD-Prefer: EDPS\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=2678400\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nserver: Microsoft-IIS/10.0\r\nx-correlationid: 6821681c-c7db-46d8-adae-77dd9687745f\r\nx-usersessionid: 6821681c-c7db-46d8-adae-77dd9687745f\r\nx-officefe: OdcFE_IN_74\r\nx-officeversion: 16.0.19319.30551\r\nx-officecluster: frc-000.odc.officeapps.live.com\r\ncontent-security-policy: script-src 'nonce-jaHo2QPqx5e7XFylU9N6vAo2SpblH1xPvToTldvkofxsuqe29tFhhXxNibyY61eYUyEzc5BPE19g9yydmf7v7Gzsb81CpnidfsPEqaJcMQ+pGvq1iFCtTavBhgmfD/X5DhrVrL/k1IlULHWKUNNsLnAeauOaese8A7uVZzO8P3E=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; base-uri 'self'; object-src 'none'; require-trusted-types-for 'script'; trusted-types default dompurify; report-uri https://csp.microsoft.com/report/OfficeIce-OfficeDiscovery-Prod\r\np3p: CP=\"CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR\"\r\nx-aspnetmvc-version: 5.2\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Type,X-OfficeCluster,X-OfficeFE,X-OfficeVersion,X-CorrelationId\r\nclientconfig: https://clientconfig.microsoftonline-p.net\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\nx-content-type-options: nosniff\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ncontent-length: 289\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":566,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dbf5130b5b17e74f8444169ec3fa3f97","sha1":"3087b326ce25e0b1910d9a405daf4f21b470dc00","sha256":"1822d2935308474d41eced13194c6185f6623dd5f7b3370d69b1e219fdeb0e9f","sha512":"7365e26047fed32ee88289aa3936e38d13e90cb679452ab138c4d8e4240fd5a1807fdb30ad9fc0c38ddf48b8cdd1a49e436c0d9490e75301691dd80ae0fc35f1","ssdeep":"","tlshash":"b7f08b5383551612ef0c6250125cec2b906f471f4dd1cb4dc7e8dd523cdfb9aa576152","first_seen":"2025-10-01T07:38:25.900468Z","last_seen":"2025-10-29T14:31:04.108571Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.office.com/c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026MUID=357F1D0A834F647835790B72874F6F54","fqdn":"c.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.msn.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 29 Aug 2025 09:32:53 GMT","end":"Wed, 25 Feb 2026 09:32:53 GMT"},"fingerprint":{"sha1":"1F:6E:0C:70:15:B6:91:94:A2:6D:80:84:31:06:32:59:EE:A7:1E:ED","sha256":"6D:46:9D:B9:2C:1E:01:CD:56:0B:A7:C8:81:62:62:33:63:1E:7C:4E:B0:7D:FD:16:D9:35:48:4B:7E:7E:DC:36"}}},"request":{"raw":"GET /c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026MUID=357F1D0A834F647835790B72874F6F54 HTTP/1.1\r\nHost: c.office.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://forms.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; SM=T; MUID=357F1D0A834F647835790B72874F6F54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 01 Oct 2025 07:38:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nlast-modified: Tue, 30 Sep 2025 20:54:44 GMT\r\netag: \"2ddc65734c32dc1:0\"\r\nx-powered-by: ASP.NET\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: SM=C; domain=c.office.com; path=/; SameSite=None; Secure;\nMUID=357F1D0A834F647835790B72874F6F54; domain=.office.com; expires=Mon, 26-Oct-2026 07:38:01 GMT; path=/; SameSite=None; Secure; Priority=High;\nMR=0; domain=c.office.com; expires=Wed, 08-Oct-2025 07:38:01 GMT; path=/; SameSite=None; Secure;\nANONCHK=0; domain=c.office.com; expires=Wed, 01-Oct-2025 07:48:01 GMT; path=/; SameSite=None; Secure;\r\nx-azure-ref: 20251001T073801Z-r1f97b5f7b5wkwc6hC1SVGhm5000000002wg00000000267y\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"32023bb33cfb2a1990a4ef2d85b6ac16","sha1":"23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1","sha256":"99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12","sha512":"d052ecec2839340876eb57247cfc2e777dd7f2e868dc37cd3f3f740c8deb94917a0c9f2a4fc8229987a0b91b04726de2d1e9f6bcbe3f9bef0e4b7e0d7f65ea12","ssdeep":"","tlshash":"fb900413f7c04440c155d03005170740175cc0100514030f405d104c5c753511c03010","first_seen":"2023-04-05T10:33:55Z","last_seen":"2026-04-04T14:57:08.23509Z","times_seen":30203,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2","fqdn":"eu-mobile.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.72","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 30 Sep 2025 12:47:34 GMT","end":"Sun, 29 Mar 2026 12:47:34 GMT"},"fingerprint":{"sha1":"81:03:08:F2:4E:4D:01:E8:01:6D:AE:3A:09:25:3F:12:C2:2B:DD:F6","sha256":"C1:C0:45:30:81:83:72:97:73:7D:DE:DF:10:8B:D6:27:94:D8:BB:FF:5C:8E:16:B5:14:71:B4:EB:36:6B:D6:14"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2 HTTP/1.1\r\nHost: eu-mobile.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.15\r\napikey: 4e990506778b4d9cbf05300e98315eed-682648e1-a406-45c4-9d5b-709b9899d662-7161\r\nupload-time: 1759304281859\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 20294\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 24\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ntime-delta-millis: 98\r\naccess-control-allow-headers: time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://forms.office.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Wed, 01 Oct 2025 07:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cfb70136cf464a8086f7eea9d46dce49","sha1":"ccf5258bff5b3a1a62d1628646a4236445428a61","sha256":"5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd","sha512":"412d831d87e9c369a01b089f908f7a9102f0d00828d142c2726395b6e9bb50cdfa45d8931e5f0a6af0cd52337611eb3fe363fedc5392f7a9209fe95fd82749b2","ssdeep":"","tlshash":"ae700022a880a0a200080800ca2002eba80020080c2ca888088e80088000c002008208","first_seen":"2023-06-07T16:42:08Z","last_seen":"2026-04-04T11:45:57.688188Z","times_seen":901,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/dll-dompurify.min.ea88d58.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/dll-dompurify.min.ea88d58.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 13002\r\ncontent-type: application/javascript\r\ncontent-md5: yXNtuu4c4qxKNpIFBZIVaw==\r\nlast-modified: Mon, 17 Mar 2025 05:16:48 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD6512EAF952E1\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 0cc4e712-b01e-003e-150e-97c04e000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":44016,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22285)","md5":"7bd5432d1b4c2cfd35b02089f5f50141","sha1":"8386a842d6f088477eb77f51d22617cb48cc4c60","sha256":"72abd4b9f2809054d0f0c0634a73e5bbccbdbbcbdc1fe436e3ff09b05b9945d4","sha512":"8d712e0547551d621f1b826333fe3cf17d0a4a55b2bbfb4f65cc4fd09d4c0689d3a6d64945174064814382567eb193bf34dd2bea34d3c0e7ca3143589073fd37","ssdeep":"768:rof57y3/9g570sl6SLaAbgyI1GTBqgrbpXpzd03eWjW8iQa9lCi/LnTnov8UMSjA:rA57y3/9g57/aAlp3pXpzo8mjf/YgN1G","tlshash":"51130729b525ac730be601e8407f960ee238146bb015c8e8fadddcf61876d466127f3b","first_seen":"2025-03-21T15:57:57.913787Z","last_seen":"2026-04-02T08:14:55.437316Z","times_seen":743,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":40,"dns":21,"connect":2,"send":0,"wait":3,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/formapi/api/15813f7f-44bc-4e8f-bab1-29b341c4f66f/users/2947a5bb-2cba-47aa-9db1-e4fae7a9b606/light/runtimeFormsWithResponses('fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u')?$expand=questions($expand=choices)\u0026$top=1","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forms.cloud.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 11 Sep 2025 02:16:21 GMT","end":"Tue, 10 Mar 2026 02:16:21 GMT"},"fingerprint":{"sha1":"FC:42:2A:19:B7:A3:DD:C6:DF:D6:3C:A1:F3:71:91:4D:2A:DE:C1:9D","sha256":"83:EF:57:EE:AD:69:DE:45:69:54:F6:73:44:E1:A4:24:24:56:30:3B:DA:6C:F3:20:18:33:E2:7E:1A:B6:9E:C6"}}},"request":{"raw":"GET /formapi/api/15813f7f-44bc-4e8f-bab1-29b341c4f66f/users/2947a5bb-2cba-47aa-9db1-e4fae7a9b606/light/runtimeFormsWithResponses('fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u')?$expand=questions($expand=choices)\u0026$top=1 HTTP/1.1\r\nHost: forms.office.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-UserSessionId: d5cd4d01-cfbd-441c-8dbc-24166265a6c5\r\n__RequestVerificationToken: 6wo0PrR3WSog5fW1bxWSaDIMCeAkzUo3Qch5dJmVUNCZbG0fmqKAqdVrBTpjIAErMXCh0krvQSpgl8S78p0LmNF-MXf2PBg3uyG4_-K2vF01\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1; FormsWebSessionId=63b4b7db-03a8-40af-a844-f68898ad8f83; __RequestVerificationToken=XgfMPaZj3FjTTKHJDRK0o9mZDNhOihP3NGeuwHXuuoCZ4QJ1JyqB4y_KchmMWLnbAEXfqBWahL_FxSyvQUbKd21B8RCXrRRdVXl2LuamhdU1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-routingofficecluster: neu-100.forms.office.com, neu-101.forms.office.com\r\nx-routingofficefe: FormsSingleBox_IN_9, FormsSingleBox_IN_8\r\nx-routingofficeversion: 16.0.19324.42052, 16.0.19324.42052\r\nx-routingsessionid: d5cd4d01-cfbd-441c-8dbc-24166265a6c5\r\nx-routingcorrelationid: c163bd21-b629-4891-a8c2-308e96cad2d8\r\nx-correlationid: c163bd21-b629-4891-a8c2-308e96cad2d8\r\nx-officecluster: neu-101.forms.office.com\r\nx-officefe: FormsSingleBox_IN_11\r\nx-officeversion: 16.0.19324.42052\r\nx-usersessionid: d5cd4d01-cfbd-441c-8dbc-24166265a6c5\r\nx-robots-tag: noindex, nofollow\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 0A1E542C014644F3B717D259FD5D86DC Ref B: SVG20EDGE0118 Ref C: 2025-10-01T07:38:00Z\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14770,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5ca7f4c6f6d647d258fb4d9c203bf4c9","sha1":"e4d81caedd1c8ba2b50983908888c42e13d05660","sha256":"e2b72ed3dd3ba0b438539ff74bad630a196b2b7089b59ea7d09f6669f9840994","sha512":"4b5185bed17573c2fcbce31fe8c5464b5925fd15e8292b4d145934334186a2e3216dafa9209fb1c71741cdb659672998b398d10ec05034d29fc72ec750620381","ssdeep":"192:eOkGggvWWTG+zWNwZG+o3cWwG+jRWSG+tZWIonG+7st5WdG+oYWLPG+lWukG+DYw:wg9MwZQ2TLeoYmctN5jJIfSj","tlshash":"f762a71a5a199eb5e28f0556c9b63f2b866c823bf2987cb095fe8f0501f63f54733241","first_seen":"2025-10-01T07:38:25.912444Z","last_seen":"2025-10-02T10:00:11.900797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_post.boot.e32e3e1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_post.boot.e32e3e1.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 5096\r\ncontent-type: application/javascript\r\ncontent-md5: ba+2zp6BamKeggXtppWsIg==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7A31755\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 689f2d8f-601e-003d-20a4-2e212a000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":15572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15316)","md5":"7b946e4dafb90c6a9e60da6cc5421bdf","sha1":"b76e178ce1c9ebd33ec4b218e8a1556f6ae2c11b","sha256":"a2db34f61d14bf751c68679aadd1a8a58967221d1ba48b17f5fc5432a7715fe8","sha512":"c9907957c44bd04d6dee06c3ac6230508eec6f64fb14d5f88033b2aaf9dacbd9d522f7fa77db730d6f3ca7f8c47c11dcd5ab2150aae44b85a1c5445a4bfaf004","ssdeep":"192:SyWY7pvB2//7WBOJdvjQxE6UmSiq8qJ4yVJXIeuchHYfy9SlP6GwK:SyWQpvlWvVJ4SJXIeuchHGlr","tlshash":"7862b685bcd0b019a22b21abd03f060df2262f46892d8e91f055ec987d74adf9136fdc","first_seen":"2025-09-30T15:27:00.901994Z","last_seen":"2025-10-15T07:53:27.856769Z","times_seen":54,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.utel.7511518.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.utel.7511518.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 37934\r\ncontent-type: application/javascript\r\ncontent-md5: 3UPuuQE8dmSJuQsBpTt2Rg==\r\nlast-modified: Mon, 22 Sep 2025 04:53:30 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDF993FA2E7C35\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 621519ab-e01e-0051-4388-2bcabd000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":139821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34156)","md5":"8fdf2bd9de45f4c641689d51cf63b27e","sha1":"c26fe88f7e90c5649338e760b3d8a90160e43d36","sha256":"787dbcafc49171f6b698fbfe601eb58e5f56308831d21fb4441916705571348b","sha512":"8f41fdb98c2a5578e34a35fd905f8ffcb06a64d64a5dd6f65d00c1d2a1961fe4ff5e65caf455f907f68520697bc685b36db58ebee969351b79db1f0b8224fd76","ssdeep":"1536:brsYZ3z5b7pimLVw1xJIjQtzek3tdkDf10I1NVwwSx:bxxz5rw1xWio0IpwNx","tlshash":"78d3f7ddf5c2785a47a331b640af108fba7e2cd2049c5924e242fac67cb902d9597f9c","first_seen":"2025-09-24T12:14:40.000636Z","last_seen":"2025-12-17T09:29:19.878783Z","times_seen":226,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.bing.com/c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026RedC=c.office.com\u0026MXFR=357F1D0A834F647835790B72874F6F54","fqdn":"c.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 09 Sep 2025 10:31:56 GMT","end":"Sun, 08 Mar 2026 10:31:56 GMT"},"fingerprint":{"sha1":"50:8E:E5:0E:CF:A8:D3:35:02:44:1B:62:B8:0C:E5:6C:F2:92:A0:4A","sha256":"AE:24:3D:66:8E:C9:C7:F7:4A:0D:CD:1A:D2:1C:66:76:B4:EF:E3:0C:39:72:89:34:B3:62:09:3A:F8:86:BF:77"}}},"request":{"raw":"GET /c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026RedC=c.office.com\u0026MXFR=357F1D0A834F647835790B72874F6F54 HTTP/1.1\r\nHost: c.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://forms.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nlocation: https://c.office.com/c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026MUID=357F1D0A834F647835790B72874F6F54\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: MUID=357F1D0A834F647835790B72874F6F54; domain=.bing.com; expires=Mon, 26-Oct-2026 07:38:01 GMT; path=/; SameSite=None; Secure; Priority=High;\nMR=0; domain=c.bing.com; expires=Wed, 08-Oct-2025 07:38:01 GMT; path=/; SameSite=None; Secure;\nSRM_B=357F1D0A834F647835790B72874F6F54; domain=c.bing.com; expires=Mon, 26-Oct-2026 07:38:01 GMT; path=/; SameSite=None; Secure;\r\nx-powered-by: ASP.NET\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B95365C32ABC4972964F16839E11A543 Ref B: OSL30EDGE0505 Ref C: 2025-10-01T07:38:01Z\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":13,"dns":2,"connect":3,"send":0,"wait":46,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.msal.7a9e5dd.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.msal.7a9e5dd.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 81849\r\ncontent-type: application/javascript\r\ncontent-md5: ZDq/GxrXnYoH4wOb5mU1LQ==\r\nlast-modified: Thu, 25 Sep 2025 05:08:38 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFBF196A3D476\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 1243345b-801e-0078-22e3-2df4c9000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":426415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14356)","md5":"4d3b3ac178a0db95bdcfb07df2111ee1","sha1":"30c2cc1ef15d95d7c2a778b58478d8e9d6de34a2","sha256":"64eade5289e873b773452efc0a6c72d6e55035c4481ac49a0ec384f8ef9d3606","sha512":"953a1d459fb96494812028b8eaa662b015c5bcb962b858d0a37dbad61f7fd446387737228d2c4e593486a8b86db0bc8f940de6c79ca65a2a50b11dd071f2efa6","ssdeep":"6144:c2fmV+zW/Fj5b9AbdPYxXiaaBhloMzIMJ3JVdjuvkYx7wYjbpRK28:c2fmV+zMb9S56u3/d6RdRK9","tlshash":"f6941885b3d77027a7a9117ee4762311b3386584680e406dfbf879ca3c62543a37bb78","first_seen":"2025-09-26T20:35:13.671363Z","last_seen":"2025-10-21T10:14:42.876545Z","times_seen":73,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.office.com/c.gif","fqdn":"c.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.msn.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 29 Aug 2025 09:32:53 GMT","end":"Wed, 25 Feb 2026 09:32:53 GMT"},"fingerprint":{"sha1":"1F:6E:0C:70:15:B6:91:94:A2:6D:80:84:31:06:32:59:EE:A7:1E:ED","sha256":"6D:46:9D:B9:2C:1E:01:CD:56:0B:A7:C8:81:62:62:33:63:1E:7C:4E:B0:7D:FD:16:D9:35:48:4B:7E:7E:DC:36"}}},"request":{"raw":"GET /c.gif HTTP/1.1\r\nHost: c.office.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 01 Oct 2025 07:38:01 GMT\r\ncontent-length: 0\r\nlocation: https://c.bing.com/c.gif?ctsa=mr\u0026CtsSyncId=404A8E4FED234EF3BBB724C31F91E01D\u0026RedC=c.office.com\u0026MXFR=357F1D0A834F647835790B72874F6F54\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nx-powered-by: ASP.NET\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: SM=T; domain=c.office.com; path=/; SameSite=None; Secure;\nMUID=357F1D0A834F647835790B72874F6F54; domain=.office.com; expires=Mon, 26-Oct-2026 07:38:01 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nx-azure-ref: 20251001T073801Z-r1f97b5f7b5wkwc6hC1SVGhm5000000002wg00000000267t\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":29,"dns":4,"connect":10,"send":0,"wait":42,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/ls-response.en-us.0b110d0a5.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/ls-response.en-us.0b110d0a5.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 9864\r\ncontent-type: application/javascript\r\ncontent-md5: houf26JDDLShIFNJ7mYgjw==\r\nlast-modified: Fri, 26 Sep 2025 00:08:16 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90CAB2A46B\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 57929a3f-401e-0015-06a4-2e4082000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":33704,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (33680), with no line terminators","md5":"697c1dc56b971a7357ec9a968e0fb4d9","sha1":"d429d9618382de8f1d27cb8579ba24b3a14493b0","sha256":"edc282d71e369ab590c84c3faa092b53d29efb6ffc1b58f17c955082a2cda346","sha512":"1b20cdf85bae7be13ccdc57c7db7fb70e6f8822430a054523ed99a151826dd804f265d838d27f453ba6abd2805f142f23a736a2dbe499f9a6a797e2ee38c92aa","ssdeep":"768:ZCzfymM8C/I9ujl4wRsQuhl9deQ0NR4a9WGYO6qOegHUUVd2lHE1D43VRxk:ZNRA9+46shl9deQ0NR4a9WGYOVOJHUEF","tlshash":"d0e2c61fd78511360b9212c27ccf6f96b79d52793384672b582c416c03e9b9ea32b7d8","first_seen":"2025-09-30T15:27:00.91286Z","last_seen":"2025-11-24T18:28:27.259674Z","times_seen":207,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":3,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_ext.6fff4c6.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_ext.6fff4c6.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 128655\r\ncontent-type: application/javascript\r\ncontent-md5: ozGilXgMSi/1aq82aCI8XA==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C79E8420\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 66bffa5e-901e-0016-65a4-2ea1e6000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":555022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64406), with no line terminators","md5":"a2b71907dbbeede950f479f62c03da0f","sha1":"a29362bc5c049e12de0462833d6a99db5ec31754","sha256":"178223a1ba3b0f03ef0fcd624e6e461937150d91fb0992ac42811019ea3d8e13","sha512":"37ca14687246a4e3a47727a8442adcb8e64bb98f0b45bb7f491fcdf2da02a6f556438f5f4eec0bc6b9b3963069a1c34bc3301f705cdaf3f59e1504eaca53157a","ssdeep":"6144:ilFIOY4jr8mEtDIswLdzlSab/tA2V7Am2AdZKX+dT/mOH:KCkr8FHKdzkqKK7/2GmOH","tlshash":"19c42cd8b3d5b0ac528b93be813f150df37b3a59755a8840e1b4dc89b834dcca52bb58","first_seen":"2025-09-30T15:27:00.91516Z","last_seen":"2025-10-06T17:23:45.172653Z","times_seen":13,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_post.boot.e32e3e1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_post.boot.e32e3e1.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 5096\r\ncontent-type: application/javascript\r\ncontent-md5: ba+2zp6BamKeggXtppWsIg==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7A31755\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 689f2d8f-601e-003d-20a4-2e212a000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":15572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15316)","md5":"7b946e4dafb90c6a9e60da6cc5421bdf","sha1":"b76e178ce1c9ebd33ec4b218e8a1556f6ae2c11b","sha256":"a2db34f61d14bf751c68679aadd1a8a58967221d1ba48b17f5fc5432a7715fe8","sha512":"c9907957c44bd04d6dee06c3ac6230508eec6f64fb14d5f88033b2aaf9dacbd9d522f7fa77db730d6f3ca7f8c47c11dcd5ab2150aae44b85a1c5445a4bfaf004","ssdeep":"192:SyWY7pvB2//7WBOJdvjQxE6UmSiq8qJ4yVJXIeuchHYfy9SlP6GwK:SyWQpvlWvVJ4SJXIeuchHGlr","tlshash":"7862b685bcd0b019a22b21abd03f060df2262f46892d8e91f055ec987d74adf9136fdc","first_seen":"2025-09-30T15:27:00.901994Z","last_seen":"2025-10-15T07:53:27.856769Z","times_seen":54,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_copilot_common_license.22a62d1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_copilot_common_license.22a62d1.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7321\r\ncontent-type: application/javascript\r\ncontent-md5: edUiIsLdgQknNS3990qR4g==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7981CDA\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 21908fbf-201e-0003-55a4-2eb655000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":23736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23454)","md5":"1334c63e234e435abb912d0f13338078","sha1":"59f398bded1979ab0f8fa8fba3ed472b9dd3ec3f","sha256":"7f959eff0b83e059c5e8ab2ec971d2ec77f578ca23b4e880083958d11a494778","sha512":"142267166e2ef5cc2d7ca105fabeedd7d439fd4ef72d9839e371c6e6495b919eed9b336bebe0c89e9f20c74e52afae8574d52d922f994a62e317d0e851537bcf","ssdeep":"384:I0/5ae7aYPhjhXWTktc8cMn7Jl7xUXxictOk3Jj/BiyBfILU3BwyOs6VZvHLypHg:K3SnyBbB5l9pJH7h25t","tlshash":"23b274c9f6c3b01a5397a2ec907f144ab13d6d4518ae9900f222e5d27c7969de033fe9","first_seen":"2025-09-30T15:27:00.904159Z","last_seen":"2025-10-15T07:53:27.832944Z","times_seen":54,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-mobile.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2","fqdn":"eu-mobile.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.69.239.72","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 30 Sep 2025 12:47:34 GMT","end":"Sun, 29 Mar 2026 12:47:34 GMT"},"fingerprint":{"sha1":"81:03:08:F2:4E:4D:01:E8:01:6D:AE:3A:09:25:3F:12:C2:2B:DD:F6","sha256":"C1:C0:45:30:81:83:72:97:73:7D:DE:DF:10:8B:D6:27:94:D8:BB:FF:5C:8E:16:B5:14:71:B4:EB:36:6B:D6:14"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2 HTTP/1.1\r\nHost: eu-mobile.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time\r\nReferer: https://forms.office.com/\r\nOrigin: https://forms.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://forms.office.com\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":58,"dns":2,"connect":25,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.office.com/e/NHykLchTCF","fqdn":"forms.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.194","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-01T07:38:00.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forms.cloud.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 11 Sep 2025 02:16:21 GMT","end":"Tue, 10 Mar 2026 02:16:21 GMT"},"fingerprint":{"sha1":"FC:42:2A:19:B7:A3:DD:C6:DF:D6:3C:A1:F3:71:91:4D:2A:DE:C1:9D","sha256":"83:EF:57:EE:AD:69:DE:45:69:54:F6:73:44:E1:A4:24:24:56:30:3B:DA:6C:F3:20:18:33:E2:7E:1A:B6:9E:C6"}}},"request":{"raw":"GET /e/NHykLchTCF HTTP/1.1\r\nHost: forms.office.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MSCC=cid=qx7ft7mavj0leq4vylbl40vv-c1=1-c2=1-c3=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nlocation: https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl\r\np3p: CP=\"CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR\"\r\nx-correlationid: 563e7861-f937-45fe-8cb4-e83076d2148e\r\nx-usersessionid: 563e7861-f937-45fe-8cb4-e83076d2148e\r\nx-officefe: FormIntelligenceService_IN_0\r\nx-officeversion: 16.0.19324.42052\r\nx-officecluster: neu-100.forms.office.com\r\nx-content-type-options: nosniff\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 47F550E4CBCA44EAB8DEBFD85B25BADB Ref B: SVG20EDGE0118 Ref C: 2025-10-01T07:38:00Z\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":70062,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":26,"dns":3,"connect":9,"send":0,"wait":130,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_copilot_common_license.22a62d1.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_copilot_common_license.22a62d1.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7321\r\ncontent-type: application/javascript\r\ncontent-md5: edUiIsLdgQknNS3990qR4g==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C7981CDA\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 21908fbf-201e-0003-55a4-2eb655000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":23736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23454)","md5":"1334c63e234e435abb912d0f13338078","sha1":"59f398bded1979ab0f8fa8fba3ed472b9dd3ec3f","sha256":"7f959eff0b83e059c5e8ab2ec971d2ec77f578ca23b4e880083958d11a494778","sha512":"142267166e2ef5cc2d7ca105fabeedd7d439fd4ef72d9839e371c6e6495b919eed9b336bebe0c89e9f20c74e52afae8574d52d922f994a62e317d0e851537bcf","ssdeep":"384:I0/5ae7aYPhjhXWTktc8cMn7Jl7xUXxictOk3Jj/BiyBfILU3BwyOs6VZvHLypHg:K3SnyBbB5l9pJH7h25t","tlshash":"23b274c9f6c3b01a5397a2ec907f144ab13d6d4518ae9900f222e5d27c7969de033fe9","first_seen":"2025-09-30T15:27:00.904159Z","last_seen":"2025-10-15T07:53:27.832944Z","times_seen":54,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.forms.office.net/scripts/dists/light-response-page.chunk.lrp_ext.6fff4c6.js","fqdn":"cdn.forms.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.33.119.194","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:00.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.forms.office.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 31 Jan 2025 00:26:58 GMT","end":"Mon, 26 Jan 2026 00:26:58 GMT"},"fingerprint":{"sha1":"24:6D:9A:64:18:AE:C5:97:07:8F:61:3D:C7:11:72:09:6F:36:E6:B6","sha256":"87:DE:85:2E:4F:04:FD:E4:9F:20:10:BC:63:96:71:B4:FD:6C:47:EF:CD:9E:25:B3:24:E3:EC:18:E4:6B:C0:AA"}}},"request":{"raw":"GET /scripts/dists/light-response-page.chunk.lrp_ext.6fff4c6.js HTTP/1.1\r\nHost: cdn.forms.office.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 128655\r\ncontent-type: application/javascript\r\ncontent-md5: ozGilXgMSi/1aq82aCI8XA==\r\nlast-modified: Fri, 26 Sep 2025 00:08:11 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DDFC90C79E8420\"\r\nserver: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 66bffa5e-901e-0016-65a4-2ea1e6000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 01 Oct 2026 07:38:00 GMT\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":555022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64406), with no line terminators","md5":"a2b71907dbbeede950f479f62c03da0f","sha1":"a29362bc5c049e12de0462833d6a99db5ec31754","sha256":"178223a1ba3b0f03ef0fcd624e6e461937150d91fb0992ac42811019ea3d8e13","sha512":"37ca14687246a4e3a47727a8442adcb8e64bb98f0b45bb7f491fcdf2da02a6f556438f5f4eec0bc6b9b3963069a1c34bc3301f705cdaf3f59e1504eaca53157a","ssdeep":"6144:ilFIOY4jr8mEtDIswLdzlSab/tA2V7Am2AdZKX+dT/mOH:KCkr8FHKdzkqKK7/2GmOH","tlshash":"19c42cd8b3d5b0ac528b93be813f150df37b3a59755a8840e1b4dc89b834dcca52bb58","first_seen":"2025-09-30T15:27:00.91516Z","last_seen":"2025-10-06T17:23:45.172653Z","times_seen":13,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.cloud.microsoft/muid.gif?muid=357F1D0A834F647835790B72874F6F54","fqdn":"forms.cloud.microsoft","domain":"cloud.microsoft","tld":"microsoft"},"ip":{"addr":"150.171.73.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forms.office.com/pages/responsepage.aspx?id=fz-BFbxEj066sSmzQcT2b7ulRym6LKpHnbHk-ueptgZUMkRXTlRRVUNHN1BFNldWUTYwN1pYWkY2Wi4u\u0026route=shorturl","date":"2025-10-01T07:38:01.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forms.cloud.microsoft","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 11 Sep 2025 02:16:21 GMT","end":"Tue, 10 Mar 2026 02:16:21 GMT"},"fingerprint":{"sha1":"FC:42:2A:19:B7:A3:DD:C6:DF:D6:3C:A1:F3:71:91:4D:2A:DE:C1:9D","sha256":"83:EF:57:EE:AD:69:DE:45:69:54:F6:73:44:E1:A4:24:24:56:30:3B:DA:6C:F3:20:18:33:E2:7E:1A:B6:9E:C6"}}},"request":{"raw":"GET /muid.gif?muid=357F1D0A834F647835790B72874F6F54 HTTP/1.1\r\nHost: forms.cloud.microsoft\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://forms.office.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nset-cookie: MUID=357F1D0A834F647835790B72874F6F54; max-age=33696000; path=/; secure; samesite=none\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-routingofficecluster: neu-100.forms.office.com\r\nx-routingofficefe: FormsSingleBox_IN_3\r\nx-routingofficeversion: 16.0.19324.42052\r\nx-routingsessionid: 8d0ba3cc-d59f-49bb-99bf-0311b32dbc6f\r\nx-routingcorrelationid: 0f42a9ef-dc19-4ce7-9bd9-ab0dda61c2b6\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 95544797E2C447928F92CD6C6DACED87 Ref B: GVX211060217054 Ref C: 2025-10-01T07:38:01Z\r\ndate: Wed, 01 Oct 2025 07:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"3eacd0132310ea44cad756b378a3bc07","sha1":"e2216a7e9b73f5cb0279351c78ce61c33475cea7","sha256":"bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96","sha512":"bd9ab35dde3a5242b04c159187732e13b0a6da50ddcff7015dfb78cdd68743e191eaf5cddedd49bef7d2d5a642c217272a40e5ba603fe24ca676a53f8c417c5d","ssdeep":"","tlshash":"76800003caa00003e2aae0320a0803002380a23002ac030e80aca0acecaa0a20c00000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-04T17:43:24.4152Z","times_seen":23750,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":55,"dns":33,"connect":10,"send":0,"wait":39,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}