1drv.ms/w/s!Au6iDAGv9iaycHaRoisuG3c5CnM
301 Moved Permanently 0 B URL HTTP/2 1drv.ms/w/s!Au6iDAGv9iaycHaRoisuG3c5CnM
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w/s!Au6iDAGv9iaycHaRoisuG3c5CnM HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?resid=B226F6AF010CA2EE!112&authkey=!AHaRoisuG3c5CnM&ithint=file%2cdocx
x-msnserver: AM4PPF7A3A9F3FA
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: 7XfBWARM9EautpQNJ1SwZA.0
x-asmversion: UNKNOWN; 19.1074.105.2010
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A6EA03BBAF6342469BE7EB72DE194E50 Ref B: OSL30EDGE0508 Ref C: 2023-01-31T12:11:39Z
date: Tue, 31 Jan 2023 12:11:39 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11083
Expires: Tue, 31 Jan 2023 15:16:22 GMT
Date: Tue, 31 Jan 2023 12:11:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12736
Expires: Tue, 31 Jan 2023 15:43:55 GMT
Date: Tue, 31 Jan 2023 12:11:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5747
Expires: Tue, 31 Jan 2023 13:47:26 GMT
Date: Tue, 31 Jan 2023 12:11:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 11:35:53 GMT
content-type: application/json
age: 2146
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G1AEtp2k41OYIxtu8yWKkrOoRfSpsqtuMerMJE4IXmLK6VWsfeIme9AADThB7cNSHoYxZc7dBtY=
x-amz-request-id: 8CDNEAHH9SHJW7PW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 11:51:09 GMT
age: 1230
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 12:11:39 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 11:41:42 GMT
age: 1798
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6108
Expires: Tue, 31 Jan 2023 13:53:28 GMT
Date: Tue, 31 Jan 2023 12:11:40 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YyfKoW4aqMM1TIZqDxsRtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OpRzFVk2nS8qr5QUNEc8ce10cFw=
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//maincss-3d633429.css
200 OK 26 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//maincss-3d633429.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3d2c8f6504459b2e5830f6a4814202be
9957042a71e5df21409b99c98ccc788e073b0578
86a538f01e19aec395d5caa64ebad64e2343c782b56f90a49811f680de5e2d7a
GET /files/onedrive-website-release-prod_master_20230112.001//maincss-3d633429.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 25623
content-type: text/css
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:44 GMT
x-ms-request-id: f925a30b-701e-005b-75a9-2ac6ac000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:41 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filescss1-11eb1969.css
200 OK 16 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filescss1-11eb1969.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash ace3403c9fc64cf6db37ced3a75fc639
73812cc859c8a4e5208bf3b89e5c4190be2d486f
cdac259829b35ff70f7148f9575fe2fbadef119972988becb5be1ddb1f2f98b6
GET /files/onedrive-website-release-prod_master_20230112.001//filescss1-11eb1969.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 15784
content-type: text/css
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:47 GMT
x-ms-request-id: c3825eac-701e-004b-0fa9-2a03c4000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:41 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filescss2-7859787f.css
200 OK 31 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filescss2-7859787f.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5f77f27c0f0e909a57d3923881633788
1f762819bac13417e55e51fc999a8fe1235c3878
74750cf479258424a2bf8c670cf5ab1542c417a75613edda32a7c7ba67ef9997
GET /files/onedrive-website-release-prod_master_20230112.001//filescss2-7859787f.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 30612
content-type: text/css
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:45 GMT
x-ms-request-id: 39c9c473-f01e-0045-18a9-2a2a74000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:41 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
p.sfx.ms//storage/aria-2.5.0.min.js
200 OK 12 kB URL HTTP/2 p.sfx.ms//storage/aria-2.5.0.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (32013), with CRLF line terminators
Hash cc11d45b7b4c561d9ab2e012f15122f8
c487462545ef3d6aa286f892c4eeeef4224e31f7
5d66a53ba4c9cdf3555618892edb9a16736210faea448f8d7d924df85fa4a3ad
GET //storage/aria-2.5.0.min.js HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript
content-encoding: gzip
last-modified: Sat, 17 Dec 2022 01:02:14 GMT
accept-ranges: bytes
etag: "0ef3333b311d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-msnserver: RD0003FF23BA86
x-odwebserver: westeurope1-odwebp
date: Tue, 31 Jan 2023 12:11:41 GMT
content-length: 12195
X-Firefox-Spdy: h2
p.sfx.ms/is/invis.gif
200 OK 43 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 74996e793f8888edd815ccfed177f5ee
376e57f850a242cf780f6904ef4b54f0587067df
cb725f174a86bcf23b5b9f53e5b60d53eaa1524f88f4dcec165670a3b0eb6c2c
GET /is/invis.gif HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: image/gif
last-modified: Sat, 17 Dec 2022 01:02:14 GMT
accept-ranges: bytes
etag: "0ef3333b311d91:0"
server: Microsoft-IIS/10.0
x-msnserver: RD0003FF23BA86
x-odwebserver: westeurope1-odwebp
date: Tue, 31 Jan 2023 12:11:41 GMT
content-length: 43
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d7d6773bb59aef18820fe7a76cbb6590
6605e7eb802d1bb654556684a589758ef8cb043a
2936d1f2b3fab62a2538fa61a06acd11c627ebdd7e8791ca9c71a6d82fbb5194
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:13 GMT
Last-Modified: Mon, 30 Jan 2023 13:08:22 GMT
ETag: "2936d1f2b3fab62a2538fa61a06acd11c627ebdd7e8791ca9c71a6d82fbb5194"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 3C0DB328627641628850A767304655DA Ref B: OSL30EDGE0409 Ref C: 2023-01-31T12:11:41Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 4e3276da6794a83d2f4d64b5180bf007
b5b60ea1020b4fcd6c5eb3c859fbbcca326b47f8
067564dee6d5eed086691178afcc14663c798e121106a15212144b75a9613855
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:13 GMT
Last-Modified: Mon, 30 Jan 2023 13:08:22 GMT
ETag: "067564dee6d5eed086691178afcc14663c798e121106a15212144b75a9613855"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 17DC77EDA7F0402F9DDEB3E64CE6E09B Ref B: OSL30EDGE0407 Ref C: 2023-01-31T12:11:41Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
c1-word-view-15.cdn.office.net/wv/s/hE7DDBF39B9CAB02A_App_Scripts/word.boot.js
200 OK 34 kB URL HTTP/1.1 c1-word-view-15.cdn.office.net/wv/s/hE7DDBF39B9CAB02A_App_Scripts/word.boot.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d04813afe8fb17d6cecba9fa06340a65
745c86f69577765347ac1b2f81a9f9834f13bc12
fc13dfd9367194fa908d628b5895dc4e48bc7f10daa4e2f468ec6c93f53136cb
GET /wv/s/hE7DDBF39B9CAB02A_App_Scripts/word.boot.js HTTP/1.1
Host: c1-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public,max-age=31536000
Content-Length: 33499
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 30 Jan 2023 18:36:40 GMT
Accept-Ranges: bytes
ETag: W/"527529cbd934d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 931ba4fc-ff89-432e-97ce-668a74d6e4c3
X-UserSessionId: 931ba4fc-ff89-432e-97ce-668a74d6e4c3
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00012379
X-OfficeVersion: 16.0.16124.41002
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00012379
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control
X-MSEdge-Ref: Ref A: 537BABDB3EF7409CAADA9CA4AF553303 Ref B: AMS231032605031 Ref C: 2023-01-30T18:36:40Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
Connection: keep-alive
c1-word-view-15.cdn.office.net/wv/resources/1033/FavIcon_Word.ico
200 OK 7.9 kB URL HTTP/1.1 c1-word-view-15.cdn.office.net/wv/resources/1033/FavIcon_Word.ico
IP
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 760f69985c44556f90d31cdb278286be
98632d39e3ca24fdd974ac98bf187963a065ce8a
4fbd8cc4075e1795215327af5e43e8ca3339677802700d19aefc57ba1713a12d
GET /wv/resources/1033/FavIcon_Word.ico HTTP/1.1
Host: c1-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public,max-age=31536000
Content-Length: 7886
Content-Type: image/x-icon
Last-Modified: Wed, 21 Dec 2022 23:20:24 GMT
Accept-Ranges: bytes
ETag: "d134edcd9215d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 5a9f9215-5ea4-4cf4-9ce4-0bc557232667
X-UserSessionId: 5a9f9215-5ea4-4cf4-9ce4-0bc557232667
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF000141D8
X-OfficeVersion: 16.0.16125.41000
X-OfficeCluster: SNL1
X-OFFICEFD: AM4PEPF000141D8
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wordslice,afd_powerpointslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 3147336855A24BA9AAEB5BB60C75DFC4 Ref B: AMS231032603049 Ref C: 2023-01-27T15:38:22Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3783
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 12:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3783
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 12:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3783
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 12:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3782
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 12:11:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3782
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 12:11:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L6MnX0h8Bn9-ufqI6yOzQAPhqc4SoJKySgzlm756NaiVrfJpnftIWQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 06:29:38 GMT
age: 20524
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6f9ffb8f9e99229b45ca5fdb84ce7d5
04577ad69ee9749b14382254eb5bbf0e1edcd7fa
6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R29JYq4Z8V_Xuq2no0bKxk1K6h2PmTO5OSxzMa4zppDVk3j9rO9aTw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:24:36 GMT
age: 31626
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d957012d3e2b8c3bc0eefe11d66e8554
1959fdd94846fa3791c4890578dd15336b909dcc
a97e81ec5eb2eda6a603bf4bfd4fa4ef4fab762747479489e99e6c713258a736
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13853
x-amzn-requestid: ca6ea6e7-3e13-4194-87f5-20a07b813e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zzF4hIAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-772487cb1b7495c52c552d36;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUGjUSIkoacdmaO1jnMwIuNMONhjyVfAIcTQ3B5d5da_g9eEnCtW7g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:17 GMT
age: 51805
etag: "1959fdd94846fa3791c4890578dd15336b909dcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 36907
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 51801
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:50:52 GMT
age: 30050
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 115
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: a9685dbd-69d3-4ca0-b3d0-87d83d656caa
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006A10
x-officeversion: 16.0.16125.41000
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D43C0797F07F4AA5A5A99A08F0AA5A3B Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:41 GMT
content-length: 0
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1849
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 296c1136-c618-49f6-9e88-7c8e5c65c4be
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006A0E
x-officeversion: 16.0.16125.41000
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: B6D1C2E29E47165B5D75AF507A0E5E6EE28A19B4
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19214611,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,509743362,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 513E02B105EA42DE8C66640545331E8B Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:41 GMT
content-length: 0
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash ceb466f8f158ed1dc874b32646837a74
da20770615264952e0d05e0eec7d856cbdbe9c6d
a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:09 GMT
Last-Modified: Mon, 30 Jan 2023 14:14:09 GMT
ETag: "a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 98B0EA648B6747CEAF966AD50E246FFC Ref B: OSL30EDGE0409 Ref C: 2023-01-31T12:11:42Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
onedrive.live.com/view.aspx?resid=B226F6AF010CA2EE!112&ithint=file%2cdocx&wdo=2&authkey=!AHaRoisuG3c5CnM
200 OK 36 kB URL HTTP/2 onedrive.live.com/view.aspx?resid=B226F6AF010CA2EE!112&ithint=file%2cdocx&wdo=2&authkey=!AHaRoisuG3c5CnM
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 90b394d77fc79210ef846662d4886def
68184509cd5cc290562ae3431bc92f8cadb8122a
57f01c9b5178ee4c4a4e5a0ad03c5ac24bebd0770169bd0b4258dfdf389b6caf
GET /view.aspx?resid=B226F6AF010CA2EE!112&ithint=file%2cdocx&wdo=2&authkey=!AHaRoisuG3c5CnM HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/redir?resid=B226F6AF010CA2EE!112&authkey=!AHaRoisuG3c5CnM&ithint=file%2cdocx
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:63cPT4QD24g=:naUjW0FCQoAQ1mX8quRAZYeQFAdWmck4AhAmVuResJQ=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=1; wla42=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:CINxT4QD24g=:EJIHav/eZBldoMDkTtPmCegP8Z03vTSP8PKrtEYyJos=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Tue, 31-Jan-2023 10:31:40 GMT; path=/
wla42=; domain=live.com; expires=Tue, 07-Feb-2023 12:11:41 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D748622
x-odwebserver: northcentralus0-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9BB380230F194632B32CA7D6F88E2B56 Ref B: OSL30EDGE0407 Ref C: 2023-01-31T12:11:40Z
date: Tue, 31 Jan 2023 12:11:40 GMT
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash ceb466f8f158ed1dc874b32646837a74
da20770615264952e0d05e0eec7d856cbdbe9c6d
a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:09 GMT
Last-Modified: Mon, 30 Jan 2023 14:14:09 GMT
ETag: "a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: B47E5D727BF94CE280D60A5B618A30A3 Ref B: OSL30EDGE0211 Ref C: 2023-01-31T12:11:42Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash ceb466f8f158ed1dc874b32646837a74
da20770615264952e0d05e0eec7d856cbdbe9c6d
a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:09 GMT
Last-Modified: Mon, 30 Jan 2023 14:14:09 GMT
ETag: "a1fbd6e0e9dd4efc5271495fef3b14ed3c796f3f3aeef939c65b5da2bf94f0ed"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 128840C2D83742EA80F1CCF7D32C5F6F Ref B: OSL30EDGE0410 Ref C: 2023-01-31T12:11:42Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
oneocsp.microsoft.com/ocsp
200 OK 1.7 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash cc390c936e438cb740021779e94594bd
5f46e89193b1f5578b5db9fe5318ded331752443
90270a8e91e506d1e1df11a2b67d9f4405f2be93c33bf79e603563e7ac5f57fa
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1741
Content-Type: application/ocsp-response
Expires: Fri, 03 Feb 2023 15:50:09 GMT
Last-Modified: Mon, 30 Jan 2023 14:14:09 GMT
ETag: "90270a8e91e506d1e1df11a2b67d9f4405f2be93c33bf79e603563e7ac5f57fa"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 2F50BBA53C8848CFBA61ABE7609A2615 Ref B: OSL30EDGE0211 Ref C: 2023-01-31T12:11:42Z
Date: Tue, 31 Jan 2023 12:11:41 GMT
c1h-word-view-15.cdn.office.net/wv/s/h88F1FB3B7AD7655A_App_Scripts/exp/appResourceLoader.min.js
200 OK 3.6 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h88F1FB3B7AD7655A_App_Scripts/exp/appResourceLoader.min.js
IP
File type ASCII text, with very long lines (15937)
Hash cafa7a54b9d112d7b81a9c62fabb4442
17d341ef3cbd9406b7f632cc95b6167844493be2
bc8baba86fb8585fd2210ec9b677d8bc961c7e69e9d3b6ceaf9c26e5139d9503
GET /wv/s/h88F1FB3B7AD7655A_App_Scripts/exp/appResourceLoader.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 3550
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:23:34 GMT
accept-ranges: bytes
etag: W/"8111f6d1c31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 0d1572a8-9c90-4aa1-8a51-cfd069a261ff
x-usersessionid: 0d1572a8-9c90-4aa1-8a51-cfd069a261ff
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000131EE
x-officeversion: 16.0.16118.41011
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000131EE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 0AD30E5AA8034747A3A6E124239F386C Ref B: AMS231032603033 Ref C: 2023-01-26T00:23:34Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hFC485E079BC900D7_resources/en-US/clientManifest.js
200 OK 61 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hFC485E079BC900D7_resources/en-US/clientManifest.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 73ee2acd8dfa5057068f8e0390ef62b3
adc44f4fe12be5db4225c024da3a1df0addcc802
db3f55ce95dc30e70d8a6ae33009656512e7158ae6594d4a09e1f5c10ae27232
GET /wv/s/hFC485E079BC900D7_resources/en-US/clientManifest.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 61388
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:24:14 GMT
accept-ranges: bytes
etag: W/"841dca2d7432d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 44d6e19a-c0c8-4904-b8e2-4cbc026179cc
x-usersessionid: 44d6e19a-c0c8-4904-b8e2-4cbc026179cc
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00010311
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00010311
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 273A54D762FB4EB9A4D71E2F46821610 Ref B: AMS231032604003 Ref C: 2023-01-27T17:24:14Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hBFBFF51A290440D8_App_Scripts/WordViewerDS.js
200 OK 486 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hBFBFF51A290440D8_App_Scripts/WordViewerDS.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 486 kB (486150 bytes)
Hash df9cc7bf867aa3b6dd3654b93ec55984
d79d5d15b5e38084cb4e7b8b0e68643164cfa27f
6bfedd5730aa243a25c4d0c2113347d293cb644168b8d302bf6e4d6184754a3a
GET /wv/s/hBFBFF51A290440D8_App_Scripts/WordViewerDS.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 486150
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:26:15 GMT
accept-ranges: bytes
etag: W/"7f9ad6757432d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 771037ac-406c-4283-849e-fd547c25a226
x-usersessionid: 771037ac-406c-4283-849e-fd547c25a226
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00011BB8
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00011BB8
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 58E27094EACB48B7B0E8D8952C53F1B8 Ref B: AMS231032609049 Ref C: 2023-01-27T17:26:15Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hCBA89239522795D5_App_Scripts/Compat.js
200 OK 1.8 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hCBA89239522795D5_App_Scripts/Compat.js
IP
File type ASCII text, with very long lines (6042), with no line terminators
Hash 1c6c65779aa092ed4158d351586ed396
391d9dbee852a15643642baa83278670ec2bc272
6b35b7fb487f72cc384ee2cee9175875bca7b64b0a805a54581c4312abf300cb
GET /wv/s/hCBA89239522795D5_App_Scripts/Compat.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 1828
content-type: application/javascript
content-encoding: gzip
last-modified: Sat, 21 Jan 2023 03:34:41 GMT
accept-ranges: bytes
etag: "a68f14b492dd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 40ed5ea7-6976-48fb-9856-4fdce43b162d
x-usersessionid: 40ed5ea7-6976-48fb-9856-4fdce43b162d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006A0A
x-officeversion: 16.0.16118.41011
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00006A0A
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 88C5DC35DBE0471D910275797CE1E523 Ref B: AMS231032602029 Ref C: 2023-01-22T14:46:08Z
date: Tue, 31 Jan 2023 12:11:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"}]
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: adf4c6f7-fd73-442a-a7ab-205c1a88333c
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
x-officefe: BY3PEPF0002208D
x-officeversion: 16.0.16125.41000
x-officecluster: PGTUS1
access-control-allow-origin: https://word-view.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BY3PEPF0002208D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: FBDACCECE7814D36863D368EE5D35D0F Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:41 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h74E679520F2EF14B_App_Scripts/1033/word-app-intl.min.js
200 OK 117 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h74E679520F2EF14B_App_Scripts/1033/word-app-intl.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 117 kB (116755 bytes)
Hash a5f52b67e3a9eef3aae251b7b10df219
6f1d189d404398bbac95f838c0a0ef409351dd6c
6c706c73e13f1b9d4870851fb1d32efe665ab2fcca2557c46c157ee78bdf34ce
GET /wv/s/h74E679520F2EF14B_App_Scripts/1033/word-app-intl.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 25 Jan 2023 23:59:11 GMT
accept-ranges: bytes
etag: W/"8f431151931d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: d0f58ff9-6c23-4a7c-a28a-991341f09acc
x-usersessionid: d0f58ff9-6c23-4a7c-a28a-991341f09acc
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ACA
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011ACA
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 0480CC504AEE413A875BC5A623F582AA Ref B: AMS231032609025 Ref C: 2023-01-25T23:59:11Z
content-length: 116755
date: Tue, 31 Jan 2023 12:11:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h9CAB407DF4B4CF49_App_Scripts/1033/CommonIntl.js
200 OK 30 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h9CAB407DF4B4CF49_App_Scripts/1033/CommonIntl.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ae63f9199f2c718ea53c3c422644180b
626047eba5791ef7d6bf5ab51a9008856c565dff
180a7d71939a791b085ccb3e6120aa445f98f90e0cfcf3a7d44bbbec97630962
GET /wv/s/h9CAB407DF4B4CF49_App_Scripts/1033/CommonIntl.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 30400
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:24:15 GMT
accept-ranges: bytes
etag: W/"8dbed32d7432d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 6fc44908-3415-4bd9-bcfc-463c28aa8c2d
x-usersessionid: 6fc44908-3415-4bd9-bcfc-463c28aa8c2d
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000069EA
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000069EA
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6F8128656F3B479DAE328D354B4D88E5 Ref B: AMS231032603033 Ref C: 2023-01-27T17:24:15Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h209CE40F29B0099B_App_Scripts/1033/WordViewerIntl.js
200 OK 3.3 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h209CE40F29B0099B_App_Scripts/1033/WordViewerIntl.js
IP
File type ASCII text, with very long lines (19813), with no line terminators
Hash cbd862ce1bbf5fe1040dfa50ed668e3c
0d5b15c0dff9a7d410aac2c2a601a59ed659e3da
60e22caea3638bd375d6c86cc5b2ebd42c92d1f9b6d732deb78f43717fd4b387
GET /wv/s/h209CE40F29B0099B_App_Scripts/1033/WordViewerIntl.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 3344
content-type: application/javascript
content-encoding: br
last-modified: Wed, 25 Jan 2023 07:18:33 GMT
accept-ranges: bytes
etag: "9b28753b8d30d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 9c45b2e7-8980-4821-a808-30a39dda859c
x-usersessionid: 9c45b2e7-8980-4821-a808-30a39dda859c
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DM3PEPF000138EA
x-officeversion: 16.0.16123.41006
x-officecluster: US4C
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DM3PEPF000138EA
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control
x-msedge-ref: Ref A: D975AFF113B04879B815B01050C2737E Ref B: AMS231032608045 Ref C: 2023-01-25T14:56:45Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hD733136371B4BEE0_App_Scripts/MicrosoftAjaxDS.js
200 OK 27 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hD733136371B4BEE0_App_Scripts/MicrosoftAjaxDS.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash bb8ae9fcdbc8bb9a9a9b02df17d4365f
ca3b0e716d9f10fd72fd6a9ca0053fdf84afd02e
7ee57c74db26b0a2c80664630d0c97a78cdaa6d34cce01fb387f63044f76f820
GET /wv/s/hD733136371B4BEE0_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 27322
content-type: application/javascript
content-encoding: br
last-modified: Sat, 21 Jan 2023 02:52:21 GMT
accept-ranges: bytes
etag: "c9971f62432dd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e6bc23ad-a89a-4386-ba14-405cc9424898
x-usersessionid: e6bc23ad-a89a-4386-ba14-405cc9424898
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000102D4
x-officeversion: 16.0.16118.41011
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000102D4
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: 6D553349131549E59C1B3831B35A0E95 Ref B: AMS231032603005 Ref C: 2023-01-24T13:02:43Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/WordViewer.css
200 OK 34 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/WordViewer.css
IP
Hash ef2910988407353caa398f5de53bea78
af3124d3caefc80616782d1251398581551e651f
69414d0aeaf792076c1b98b84d832bc93714dd65f141a8066e1b7022b82379db
GET /wv/s/h5001B2DC70F3F563_resources/1033/WordViewer.css HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 33924
content-type: text/css
content-encoding: br
last-modified: Fri, 20 Jan 2023 00:25:45 GMT
accept-ranges: bytes
etag: "423510bd652cd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 77a8678a-85d7-42e0-9a4f-d56e9ae4a4a4
x-usersessionid: 77a8678a-85d7-42e0-9a4f-d56e9ae4a4a4
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00011BBA
x-officeversion: 16.0.16112.41017
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00011BBA
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 5FEB5959167C472CB9419CFCABF3917A Ref B: AMS231032607017 Ref C: 2023-01-20T07:15:57Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.8 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
File type Web Open Font Format, TrueType, length 2796, version 4.30147\012- data
Hash f7a3882336d73698919566847d10ba2f
25e0f263ff150bcced6c00163b2a4934cc0dccf7
0a8049c5627a132d4c0be08579b2a33f7e8fd285a122795cabadabf08ddb6858
GET /wv/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 2796
content-type: font/x-woff
last-modified: Sat, 28 Jan 2023 02:11:58 GMT
accept-ranges: bytes
etag: "1a3de3e6bd32d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: cb85f5e2-dd7a-4ca9-993c-f03661c0f277
x-usersessionid: cb85f5e2-dd7a-4ca9-993c-f03661c0f277
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000102D8
x-officeversion: 16.0.16124.41002
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000102D8
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: 5521480698A04F72A8507D76745C01AC Ref B: AMS231032607005 Ref C: 2023-01-28T17:47:17Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&splashscreen=1&build=16.0.16125.41000&waccluster=PIE1
200 OK 49 kB URL HTTP/2 word-view.officeapps.live.com/wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&splashscreen=1&build=16.0.16125.41000&waccluster=PIE1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 816x1056, components 3\012- data
Hash 13dee5e48fcc0c7457e63d731dccf914
557fe36d982b1d25662f9284db3c0ff841db2c8d
27d46cf46c66947e60f0e6a19d50448de9a58c574bb5b9386f3a59dfbb268b09
GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&splashscreen=1&build=16.0.16125.41000&waccluster=PIE1 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 49054
content-type: image/jpeg
expires: Wed, 31 Jan 2024 12:11:42 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc00000000-0000-0000-0000-000000000802p1.img"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8438895b-26a5-49a2-8b9e-f97fe29a6921
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAD
x-wacfrontend: DB5PEPF00011AAD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: BC3971841077406A963EC5EC0D795179 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":480,"Value":"https://c1h-word-view-15.cdn.office.net:443/wv/s/h5001B2DC70F3F563_resources/1033/WordViewer.css","Type":"ResourceDownloadSuccess"}]
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1e94bf30-36dc-4299-94d4-fb4406ffa4fd
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
x-officefe: BL6PEPF00012EF9
x-officeversion: 16.0.16127.41003
x-officecluster: PGTUS6
access-control-allow-origin: https://word-view.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BL6PEPF00012EF9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6D515F173A844365A15697B455751068 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:42 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_resources/1033/wapsw.png?b=1601612541000
200 OK 5.9 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_resources/1033/wapsw.png?b=1601612541000
IP
File type PNG image data, 448 x 336, 8-bit/color RGBA, non-interlaced\012- data
Hash 93a322c8b54119cfe9b2cea455e9204e
42578d63a9340a1788b9319ca819ce0a2074c33d
390577d35c959ffe7dd2af4519c04410a04fdc4a433b151e27b049fc4a1ab3e9
GET /wv/s/161612541000_resources/1033/wapsw.png?b=1601612541000 HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5884
content-type: image/png
last-modified: Sat, 28 Jan 2023 04:30:17 GMT
accept-ranges: bytes
etag: W/"83582439d132d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 9f5dcfcd-f3c4-433b-8f53-3315f1e9bcc5
x-usersessionid: 9f5dcfcd-f3c4-433b-8f53-3315f1e9bcc5
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000069E4
x-officeversion: 16.0.16124.41002
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000069E4
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C28DF99D36E14DF58AB7F4A9B57ED65C Ref B: AMS231032604025 Ref C: 2023-01-28T04:30:17Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js
200 OK 6.1 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js
IP
File type ASCII text, with very long lines (41569), with no line terminators
Hash 7749a9200d999b09704c291a23b3dab0
70794e85e6c1279bc92c3cc59d6c591d52b762b3
3e05f5ee1b16f7f99cd4003ccf7c5d79db3da86c22aabc695e574813cf133ce8
GET /wv/s/hDD4039F8AFAC6FD7_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 6113
content-type: application/javascript
content-encoding: br
last-modified: Fri, 20 Jan 2023 02:54:17 GMT
accept-ranges: bytes
etag: "3564e77c7a2cd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: b175a2eb-05d9-4781-a3bc-eedac40f293b
x-usersessionid: b175a2eb-05d9-4781-a3bc-eedac40f293b
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEE
x-officeversion: 16.0.16112.41017
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AEE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 03F328B58C714BB08F998970018820CF Ref B: AMS231032602031 Ref C: 2023-01-21T04:53:10Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/segoeui.woff
200 OK 23 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/segoeui.woff
IP
File type Web Open Font Format, TrueType, length 22720, version 1.0\012- data
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /wv/s/h5001B2DC70F3F563_resources/1033/segoeui.woff HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://c1h-word-view-15.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 22720
content-type: font/x-woff
last-modified: Mon, 23 Jan 2023 23:21:36 GMT
accept-ranges: bytes
etag: W/"af411c70812fd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: a351065b-ed09-4aad-87a0-84374e3d71d3
x-usersessionid: a351065b-ed09-4aad-87a0-84374e3d71d3
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AA5
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AA5
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control
x-msedge-ref: Ref A: 581113564D034ED5ACB31553A3264A7F Ref B: AMS231032607009 Ref C: 2023-01-23T23:21:36Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
Content-Type: text/plain;charset=UTF-8
Content-Length: 7464
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 06f74b6f-ecc8-4030-b885-199795a3fe54
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AE2
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
access-control-allow-origin: https://word-view.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: ECC78DBF6B164FCFB51AFE8719F2E74F Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:42 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
200 OK 1.3 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
IP
File type ASCII text, with very long lines (4174)
Hash 3fac27cc20722bcdd16eec825c95d6da
172c69d12c153799da87c97efb4578611ed0cab6
2b969a404aca2423e35f49d65b1d375c20028f13341e4a13f8d5235af89b4dff
GET /wv/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 1336
content-type: application/javascript
content-encoding: br
last-modified: Sat, 21 Jan 2023 05:25:02 GMT
accept-ranges: bytes
etag: "fccf9ab6582dd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 1294a704-4634-46f0-a72d-f0313953b50e
x-usersessionid: 1294a704-4634-46f0-a72d-f0313953b50e
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AE0
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AE0
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 21C59B698C864B339FD772845A3758A8 Ref B: AMS231032609035 Ref C: 2023-01-24T21:28:51Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
200 OK 154 kB URL HTTP/2 word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32988), with CRLF, LF line terminators
Size 154 kB (153526 bytes)
Hash 6135d1d250211154a8ccc9627a3416ba
a54b83c13451cf6a1f5626e939e5ffc6e77a669a
2827ea71a03f4f61b73b2016a1d34f9213ce7b789f77ffcfdbdd39d6a8efe76b
POST /wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 879
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: Aj5A5IHJD7yaPWBBB4m2LuQYPqNGQs5q2BJbhUyaTsfQMjkrAtPUL4ytOZISMpA8FOWp1rjpHGhp+BqXcpDN68EAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNjc5NTI5NjAwfQ==
origin-agent-cluster: ?1
x-officefe: DB5PEPF00011AC4
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
x-content-type-options: nosniff
content-security-policy: font-src data: 'self' c1h-word-view-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' c1h-word-view-15.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net c1h-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' c1h-word-view-15.cdn.office.net c1h-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net https:; media-src *.skype.com *.skypeassets.com https:; object-src 'self' blob: https:; child-src blob: ms-word: 'self' https:; worker-src blob: https:; img-src * data: blob: https:; report-uri /wv/reportcsp.ashx
document-policy: js-profiling
x-officefd: DB5PEPF00011AC4
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control
x-msedge-ref: Ref A: C1EC2594AB4545E7A251AD452D741CF1 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:42Z
date: Tue, 31 Jan 2023 12:11:41 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":747,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"}]
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: de7c517c-98fd-4ae1-8172-4ff1773906c6
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
x-officefe: BL6PEPF00012F00
x-officeversion: 16.0.16127.41003
x-officecluster: PGTUS6
access-control-allow-origin: https://word-view.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BL6PEPF00012F00
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_wordcapacity_2_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 72B5AD366B014320A774ABC91197DFC9 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:42 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hC295BC6D52FE3E2B_App_Scripts/WordViewerDS.dll1.js
200 OK 140 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hC295BC6D52FE3E2B_App_Scripts/WordViewerDS.dll1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (140461 bytes)
Hash c3c6c0aa7c87cbd8eb176aa06b721280
353572019e5217fd9b3094f55676f4b3086de764
8b4a2b9e3797577a2a99413bf3e708cb2dbf51ae493bb52a3ddfbb37564c73b1
GET /wv/s/hC295BC6D52FE3E2B_App_Scripts/WordViewerDS.dll1.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 140461
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:22:39 GMT
accept-ranges: bytes
etag: W/"91351cf57332d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: eb914da2-5080-474d-a1be-9a9852fc2cf7
x-usersessionid: eb914da2-5080-474d-a1be-9a9852fc2cf7
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ACE
x-officeversion: 16.0.16123.41006
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011ACE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9CDC9EED9B5B4DAC839D140B3219E494 Ref B: AMS231032602053 Ref C: 2023-01-27T17:22:39Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hA3596C17DAD9A003_resources/1033/progress.gif
200 OK 695 B URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hA3596C17DAD9A003_resources/1033/progress.gif
IP
File type GIF image data, version 89a, 24 x 24\012- data
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /wv/s/hA3596C17DAD9A003_resources/1033/progress.gif HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 695
content-type: image/gif
last-modified: Sat, 21 Jan 2023 01:44:35 GMT
accept-ranges: bytes
etag: "287075ea392dd91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 159b2867-715e-4c8c-99bb-725b4270c5a6
x-usersessionid: 159b2867-715e-4c8c-99bb-725b4270c5a6
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011A9E
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011A9E
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C2D2B30109834C4299260F986A328BF5 Ref B: AMS231032604025 Ref C: 2023-01-21T10:43:43Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":982,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"}]
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d1479b36-9cbe-4ea4-8caa-ad869d14a974
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
x-officefe: BL6PEPF0000BAE8
x-officeversion: 16.0.16127.41003
x-officecluster: PGTUS4
access-control-allow-origin: https://word-view.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BL6PEPF0000BAE8
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 04305DD9889348308F487A4DD1DB21CC Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:42 GMT
content-length: 0
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/ResReader.ashx?n=p_1_10.xml&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1
200 OK 386 B URL HTTP/2 word-view.officeapps.live.com/wv/ResReader.ashx?n=p_1_10.xml&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (350), with CRLF line terminators
Hash 08d01b027ff6eb84233fc594381284ad
3ecadcd7afca980596b3472b60f30bf015476ef8
1bbfb355ddb28a67d8fbe58e067fdd8df3cd46767f50016465c50bfa637da3bb
GET /wv/ResReader.ashx?n=p_1_10.xml&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-OfficeVersion: 16.0.16125.41000
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AC4
X-UserType: WOPI
haep: 1
X-Key: xN9trZ9HjNLfOthilJjg1Kh14TDCeFXfdCu906I5gIw=,638107639021837655
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 386
content-type: text/xml; charset=utf-8
content-encoding: gzip
expires: Wed, 31 Jan 2024 12:11:43 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc00000000-0000-0000-0000-000000000802p_1_10.xml"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 5d594175-978e-40b2-a0ca-d829ad537719, 5d594175-978e-40b2-a0ca-d829ad537719
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93, 13acdc30-75d8-4b16-8260-65b2c9bcdb93
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AC4
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AB7
x-wacfrontend: DB5PEPF00011AC4
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_powerpointslice_control,afd_excelslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4F6F5A0F3A334233BA2778622C54578B Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:42 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/1033/word-app-intl.min.js
200 OK 76 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/1033/word-app-intl.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Hash 3927bd4f22159bf2aa761752c1b21f70
4f0979242a890322cd47f43378fe2465775e639f
bc662114e6e1f5acb9c976a32373b0e94f73a3be34e85cf44fa824dc38bdaad5
GET /wv/s/161612541000_App_Scripts/1033/word-app-intl.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 76248
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 19:23:47 GMT
accept-ranges: bytes
etag: "539a7b6bb31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 537ddb1a-871d-4123-b9a0-ef38157f5c75
x-usersessionid: 537ddb1a-871d-4123-b9a0-ef38157f5c75
strict-transport-security: max-age=31536000
timing-allow-origin: *
access-control-allow-origin: *
x-officefe: AM4PEPF00012270
x-officeversion: 16.0.16125.41000
x-officecluster: SNL1
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00012270
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 107515E9C3FF4590AB3CE07E4EC5133B Ref B: AMS231032605017 Ref C: 2023-01-27T17:36:42Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hAEA35BB4D11A2C4A_App_Scripts/exp/appChrome.min.js
200 OK 53 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hAEA35BB4D11A2C4A_App_Scripts/exp/appChrome.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 49ebc9fd158786cd5b4162bfa438a203
b0b4c710058419dacd311e35744e6585c1bb62c9
45dfb698dc4831b4f82850a85b357d298f0bab032d244623a69011bc08ca21b4
GET /wv/s/hAEA35BB4D11A2C4A_App_Scripts/exp/appChrome.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 53225
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:08 GMT
accept-ranges: bytes
etag: W/"578f3681a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: b036efcf-d9ce-40e4-92fb-4b9e3fac03f1
x-usersessionid: b036efcf-d9ce-40e4-92fb-4b9e3fac03f1
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEC
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AEC
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D0035B82EA48413685871BB61D6315C8 Ref B: AMS231032607031 Ref C: 2023-01-26T00:09:08Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h35AFBCB66E52D25F_App_Scripts/exp/common.min.js
200 OK 272 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h35AFBCB66E52D25F_App_Scripts/exp/common.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 272 kB (271920 bytes)
Hash f63d9655ae8a10c94e43653e093aad32
845643bd224883c555aed720d3ad1b465266ef82
9d5062d2ff0464377c52c8229e0535975844cc333cc41cdfdfe5032c8d22e2f5
GET /wv/s/h35AFBCB66E52D25F_App_Scripts/exp/common.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 271920
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:08 GMT
accept-ranges: bytes
etag: W/"fa26fb681a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ae4c01c5-45a3-46c8-b74b-30263b68d8a2
x-usersessionid: ae4c01c5-45a3-46c8-b74b-30263b68d8a2
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEE
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AEE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F6B91AAF23DB416EB793A68179A4AD22 Ref B: AMS231032604049 Ref C: 2023-01-26T00:09:08Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h38E88B6AF6C65319_resources/1033/progress16.gif
200 OK 668 B URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h38E88B6AF6C65319_resources/1033/progress16.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash b5f29a6e52d426b5f64843c7c962e228
8fb8b25bd264e83f21ac4514b0945b1570c0206e
38e88b6af6c6531959a5ad70f5310b60878dc948086a1d4107168b08cc44ecf7
GET /wv/s/h38E88B6AF6C65319_resources/1033/progress16.gif HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 668
content-type: image/gif
last-modified: Thu, 26 Jan 2023 05:15:36 GMT
accept-ranges: bytes
etag: "4a332c394531d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 1fbcde74-1249-41dc-8263-b642ad4698b7
x-usersessionid: 1fbcde74-1249-41dc-8263-b642ad4698b7
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00012931
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00012931
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D09EAEF7B1BE488DB2CD8706FC2E1713 Ref B: AMS231032603027 Ref C: 2023-01-26T16:23:01Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/ResReader.ashx?n=p1.img&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz-o5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8_Wvw&access_token_ttl=1676981518434&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1
200 OK 49 kB URL HTTP/2 word-view.officeapps.live.com/wv/ResReader.ashx?n=p1.img&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz-o5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8_Wvw&access_token_ttl=1676981518434&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 816x1056, components 3\012- data
Hash 13dee5e48fcc0c7457e63d731dccf914
557fe36d982b1d25662f9284db3c0ff841db2c8d
27d46cf46c66947e60f0e6a19d50448de9a58c574bb5b9386f3a59dfbb268b09
GET /wv/ResReader.ashx?n=p1.img&v=00000000-0000-0000-0000-000000000802&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&build=16.0.16125.41000&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz-o5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8_Wvw&access_token_ttl=1676981518434&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&waccluster=PIE1 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 49054
content-type: image/jpeg
expires: Wed, 31 Jan 2024 12:11:43 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981518434&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc00000000-0000-0000-0000-000000000802p1.img"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 86365997-e07e-4cb9-852e-974958b5744e
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEC
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AEC
x-wacfrontend: DB5PEPF00011AEC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4CB58F49649047ECA9C95DB4F702980D Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteTelemetry.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 122
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 57c9655c-69cf-459e-a179-28032ba8ebda
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000131E3
x-officeversion: 16.0.16125.41000
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AD92ADB33C9B4019BDD66BE225E0CFD6 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:43 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/jquery-1.7.2-39eeb07e.js
200 OK 33 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/jquery-1.7.2-39eeb07e.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (32103)
Hash e06828a30c5961dbf764baa379145027
00a29e24ee9d45b9d3393796db6b7ae0d797ee55
4dd9ca83d03bf316fb56793d4b1dfc5b6fa203c91d1042ca7edfe19347a313fe
GET /files/onedrive-website-release-prod_master_20230112.001/jquery-1.7.2-39eeb07e.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 33335
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:44 GMT
x-ms-request-id: e69be781-b01e-0026-26a9-2ab78f000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:43 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 3488
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e392416c-31c3-4c2d-9c5e-a4fe47a7c34c
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AD8
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: B6D1C2E29E47165B5D75AF507A0E5E6EE28A19B4
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19214611,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,509743362,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 65ED79DE69BE47258599779B093956A9 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:43 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac_s_office-f935cd3b.js
200 OK 114 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac_s_office-f935cd3b.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (32044)
Size 114 kB (114294 bytes)
Hash d8eac1f7722d8cff4ac10dbaf07b3fc2
de555b18a952d1f5369df921600f23ba64a1354f
2e8913f2b61ea5c798ef70fa43c010529cc0161d41c3364e18520ca910eec2e6
GET /files/onedrive-website-release-prod_master_20230112.001/wac_s_office-f935cd3b.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 114294
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:44 GMT
x-ms-request-id: 37d0f1ff-001e-000c-2ba9-2a689f000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:43 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?build=16.0.16125.41000&waccluster=PIE1&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-BrowserUlsBeacon: [{"Index":4,"MsSinceStart":1393,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"}]
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: cb870817-7857-45a5-bd77-fbb120fad479
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
x-officefe: MW1PEPF0000CDA4
x-officeversion: 16.0.16127.41003
x-officecluster: PGTUS2
access-control-allow-origin: https://word-view.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: MW1PEPF0000CDA4
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 950EE52A5A9A4700A582D897A7BD9CE2 Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:43Z
date: Tue, 31 Jan 2023 12:11:43 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h685FC41F1F1A1217_App_Scripts/exp/appChromeLazy.min.js
200 OK 127 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h685FC41F1F1A1217_App_Scripts/exp/appChromeLazy.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 127 kB (127328 bytes)
Hash d7e3db1e7a015e0fccbc595e55bbddca
cfdfaf69babc0fff1cbfd5b9f5212f70623106bc
06148293b6e02f638c07c7062ab7a45cdb7d0785c62eb4d0d90e8bac91b271bd
GET /wv/s/h685FC41F1F1A1217_App_Scripts/exp/appChromeLazy.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 127328
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:08 GMT
accept-ranges: bytes
etag: W/"94883d691a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 3fc76312-a8d9-49ee-994c-f072bae4796a
x-usersessionid: 3fc76312-a8d9-49ee-994c-f072bae4796a
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AB2
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AB2
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AF41B61E450647DC9A87BFBCC6663143 Ref B: AMS231032607039 Ref C: 2023-01-26T00:09:08Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h23FFD2F4011CDB78_App_Scripts/exp/common50.min.js
200 OK 430 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h23FFD2F4011CDB78_App_Scripts/exp/common50.min.js
IP
File type ASCII text, with very long lines (25500)
Size 430 kB (430425 bytes)
Hash 6199814d6c33b83fa608080dfc2715e4
6c87f95d7d7060ffdc5d9e2c066ae94e7bbf6806
7811e5290a017da0352776ae29b6cddd6a558b2e84add6e9f0c85fa877d1e8e7
GET /wv/s/h23FFD2F4011CDB78_App_Scripts/exp/common50.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 430425
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:08 GMT
accept-ranges: bytes
etag: W/"5c6f49691a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 5ea01c7d-6c54-4603-a706-ea939c46a282
x-usersessionid: 5ea01c7d-6c54-4603-a706-ea939c46a282
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ABF
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011ABF
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 3639088BC57645EDA00E069DC2208768 Ref B: AMS231032607021 Ref C: 2023-01-26T00:09:08Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac0-efa56458.js
200 OK 5.9 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac0-efa56458.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15157), with no line terminators
Hash d548d4808298022cc1367319d8e471bd
c0b5c5f217012cac34a499fd8f74bbfbd827a7fa
5679746da69768cd6c119a095416dfc481a33fdcf879211ac41b324b882589c4
GET /files/onedrive-website-release-prod_master_20230112.001/wac0-efa56458.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 5910
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:47 GMT
x-ms-request-id: da69e2cc-801e-003d-20a9-2a898c000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:44 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL HTTP/2 static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0\012- data
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: static2.sharepointonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 36344
content-type: application/font-woff2
content-md5: hl8dtlRfyUovRETdYOe7xg==
last-modified: Thu, 02 Nov 2017 17:22:02 GMT
etag: 0x8D522163B704E10
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c6e23372-a01e-00a1-7b86-c85d50000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=19323142
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL HTTP/2 static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0\012- data
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: static2.sharepointonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 31824
content-type: application/font-woff2
content-md5: ZtEeVbekE932qE6Fhpfntg==
last-modified: Thu, 26 Oct 2017 19:02:14 GMT
etag: 0x8D51CA4122953A7
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a66900ba-801e-000f-7b86-c8f041000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=19323145
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h3F2FA8D80EA6D30A_App_Scripts/1033/word-app-intl-lazy.min.js
200 OK 84 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h3F2FA8D80EA6D30A_App_Scripts/1033/word-app-intl-lazy.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 62436258f395b5d258f61c776c26b62e
abfa00513384ba082215bcf62e2ba65d955bd95a
ed7a8a0d9858b0e46a558d102e02d564b43761d1d6531ee3a065556346076d83
GET /wv/s/h3F2FA8D80EA6D30A_App_Scripts/1033/word-app-intl-lazy.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 84432
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 03:51:59 GMT
accept-ranges: bytes
etag: "80adc68a3931d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 806dbbb2-ce86-44b0-9040-e48c63619e79
x-usersessionid: 806dbbb2-ce86-44b0-9040-e48c63619e79
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0001237C
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF0001237C
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_powerpointslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: BB81C37A4B73425D954AD667F5F8FDF7 Ref B: AMS231032604003 Ref C: 2023-01-26T11:24:36Z
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h40CF8E5B284465E0_App_Scripts/exp/uiSlice20.min.js
200 OK 225 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h40CF8E5B284465E0_App_Scripts/exp/uiSlice20.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 225 kB (224648 bytes)
Hash 5ee27b4605d3ed3ebc3269a41a91fb01
4578f1d2ba9da84ae75b7049d01e44b9aacd4235
4993df5d22615408e35601a3df2a816a6af53ee2267ed9b13a57c1e07b93bbda
GET /wv/s/h40CF8E5B284465E0_App_Scripts/exp/uiSlice20.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 224648
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:08 GMT
accept-ranges: bytes
etag: W/"6b7428691a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: d991c895-225e-493e-aa5e-26d3bbee165e
x-usersessionid: d991c895-225e-493e-aa5e-26d3bbee165e
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEE
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AEE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: DA8449B660CE4D18A203B41EB87641A0 Ref B: AMS231032604027 Ref C: 2023-01-26T00:09:08Z
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
js.live.net/v5.0/wl.ms.js
200 OK 16 kB URL HTTP/1.1 js.live.net/v5.0/wl.ms.js
IP
File type ASCII text, with very long lines (43338), with no line terminators
Hash c879ed9f6fb2a62232af52c1c560da47
0cfb41505ceb0ff3884d3d4aaa96be8e23bf0cc3
827883a676facfdcf9d7f192c20d9fb4e7eb36d096b0b1d619ab186b33b3d966
GET /v5.0/wl.ms.js HTTP/1.1
Host: js.live.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 10 Jul 2020 18:30:22 GMT
Accept-Ranges: bytes
ETag: "0b3b92be856d61:0"
Server: Microsoft-IIS/10.0
X-MSNServer: RD0003FF1D6B6A
X-ODWebServer: westeurope0-odwebp
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 16199
Unused62: 8096267
Date: Tue, 31 Jan 2023 12:11:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: public, max-age=50088, public
word-view.officeapps.live.com/wv/translation.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&uilang=en-US
200 OK 1.4 kB URL HTTP/2 word-view.officeapps.live.com/wv/translation.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&uilang=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1891), with no line terminators
Hash f2bfe54fe1b92e585cd2f9e991f63aea
f5742010cce7c6d21a5965e8bb8a21e6182950bd
8005647c6da588ab525fc382f13bc523b619307a291577ee6cb1668bf522ae9b
GET /wv/translation.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FB226F6AF010CA2EE%21112&access_token=4wsmALAlI85IGAvUxmNZDeYXjPWtNz06VukLWFAInZnzHz%2Do5AQY3sJuyioclYOH3l7Zv9NzUyUhNlk6K8xJCY7qqx2YzvJEmgomNsg0zF29lVwtAElNrPMAgUlAMfiUTQFRVLofZYwXSrSuMZL8%5FWvw&access_token_ttl=1676981501272&z=aQjIyNkY2QUYwMTBDQTJFRSExMTIuMjc&uilang=en-US HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=NM1cxnALZk6pOsqPiYKjrg.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2FB226F6AF010CA2EE!112&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&jsapi=1&jsapiver=v2&corrid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&newsession=1&sftc=1&readonly=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
X-OfficeVersion: 16.0.16125.41000
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AC4
X-UserType: WOPI
haep: 1
X-Key: xN9trZ9HjNLfOthilJjg1Kh14TDCeFXfdCu906I5gIw=,638107639021837655
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 1407
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 9133e3e7-2660-4119-8120-8a6feccb172e, 9133e3e7-2660-4119-8120-8a6feccb172e
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93, 13acdc30-75d8-4b16-8260-65b2c9bcdb93
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AC4
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
x-content-type-options: nosniff
x-officefd: DB5PEPF00011AE2
x-wacfrontend: DB5PEPF00011AC4
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_visioslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F823012AE2E649C3950E4FAA55CA1B2E Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:44Z
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
200 OK 0 B URL HTTP/2 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1078
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: -16073
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept, Content-Type, Content-Encoding, Client-Id
access-control-expose-headers: kill-tokens, kill-duration-seconds, time-delta-millis
date: Tue, 31 Jan 2023 12:11:43 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 5.1 kB URL HTTP/2 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with very long lines (25305), with no line terminators
Hash dbb8d764705afc7789584e93ce864bcb
34a3a545f90dc8f6e1c1d8e765e953b902cc2f24
770f2a856d4839b0eb0fcef229d618e522e51c365068051ca3d133b1ade2baaa
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: eea8377a-a8aa-4873-a3f1-c4cc7101cc77
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Tue, 31 Jan 2023 12:11:44 GMT
content-length: 5113
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filesbucket3-5286f09d.css
200 OK 2.2 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001//filesbucket3-5286f09d.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (8026), with no line terminators
Hash 8e9e7bf279db000fc6c32738485056a5
0fc5198eaf09341003a9b749b84d8f47c5361419
dd167a94bf33df6f55b651862c05eeaf42d97a57b614aca5a64f77d9656c8611
GET /files/onedrive-website-release-prod_master_20230112.001//filesbucket3-5286f09d.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 2247
content-type: text/css
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:47 GMT
x-ms-request-id: da69e6dd-801e-003d-34a9-2a898c000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:44 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
File type JSON data\012- , ASCII text
Hash 919a5b492d9963b9ce9647f91a6f18a8
7fed2f5fc2bd3211b9d5e7beaa19cf3895a68ecb
1361f5d78e770fd7b1a8290666c69ea83e02975a71b69d4ad37010dd721b4ca0
GET /wv/s/161612541000_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 4429
content-type: application/json
content-encoding: gzip
last-modified: Fri, 27 Jan 2023 18:03:14 GMT
accept-ranges: bytes
etag: W/"0ddf19f7932d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: bcfc8272-bf7f-4971-ae15-35c67969b905
x-usersessionid: bcfc8272-bf7f-4971-ae15-35c67969b905
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000131F1
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000131F1
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 71E2D81DA140463AA4217FD10C383E89 Ref B: AMS231032605045 Ref C: 2023-01-27T18:03:14Z
date: Tue, 31 Jan 2023 12:11:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
200 OK 2.0 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
File type ASCII text, with very long lines (7514), with no line terminators
Hash f5e913c674615324eaee392a5c0d8091
b03ee48579c156902fef2c1f4d0bcd31e7ce19bb
a9319a09689113b67b9a0716862a5cbc617f41b899b1b47d1c698832d80a2cef
GET /wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 2014
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:49:52 GMT
accept-ranges: bytes
etag: W/"0210c27732d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 1e6009b2-943c-434e-aa5e-8a4812f757c0
x-usersessionid: 1e6009b2-943c-434e-aa5e-8a4812f757c0
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF000131F9
x-officeversion: 16.0.16123.41006
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF000131F9
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: tasmigration015,typeheadertest,afd_waccluster,afd_wordcapacity_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AA84A020FAAE4123BD7375EEA2887011 Ref B: AMS231032606045 Ref C: 2023-01-27T17:49:52Z
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
c.live.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965
302 Found 0 B URL HTTP/2 c.live.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965 HTTP/1.1
Host: c.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BP=l=SDX.Skydrive&FR=&ST=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&RedC=c.live.com&MXFR=3B11BDEB7DF264E31EA7AF4179F260AA
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.live.com; path=/; SameSite=None; Secure;
MUID=3B11BDEB7DF264E31EA7AF4179F260AA; domain=.live.com; expires=Sun, 25-Feb-2024 12:11:44 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 31 Jan 2023 12:11:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/h5001B2DC70F3F563_resources/1033/segoeui-semilight-final.woff
IP
File type Web Open Font Format, TrueType, length 25997, version 1.0\012- data
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /wv/s/h5001B2DC70F3F563_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://c1h-word-view-15.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 25997
content-type: font/x-woff
last-modified: Sat, 28 Jan 2023 09:30:38 GMT
accept-ranges: bytes
etag: W/"a2e2882efb32d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 9a23b542-75d0-4ff0-b424-f36810d39d86
x-usersessionid: 9a23b542-75d0-4ff0-b424-f36810d39d86
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00011BBC
x-officeversion: 16.0.16124.41002
x-officecluster: PNL1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: AM4PEPF00011BBC
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 0209317D86F94409A7455A04DA769FE3 Ref B: AMS231032608039 Ref C: 2023-01-28T09:30:38Z
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
200 OK 76 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
File type Unicode text, UTF-8 text, with very long lines (65312), with no line terminators
Hash 8b8a226fce38dbfbcfd5e0b5d4ac8a00
5667201f478903994c5a4908b477a3401d377e8d
14401f9831a189c30af468083ddafff7585bc8106e77c0aa264d7441fbed89ac
GET /wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 75702
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:22:41 GMT
accept-ranges: bytes
etag: W/"33ed8f67332d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 793bffbb-2cdc-4ba9-ab61-113142eedab1
x-usersessionid: 793bffbb-2cdc-4ba9-ab61-113142eedab1
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AA6
x-officeversion: 16.0.16123.41006
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AA6
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 15161E741F944F2A83C06E6E36A8C10A Ref B: AMS231032608029 Ref C: 2023-01-27T17:22:41Z
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
200 OK 0 B URL HTTP/2 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1149
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: -16582
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept, Content-Type, Content-Encoding, Client-Id
access-control-expose-headers: kill-tokens, kill-duration-seconds, time-delta-millis
date: Tue, 31 Jan 2023 12:11:44 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&RedC=c.live.com&MXFR=3B11BDEB7DF264E31EA7AF4179F260AA
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&RedC=c.live.com&MXFR=3B11BDEB7DF264E31EA7AF4179F260AA
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&RedC=c.live.com&MXFR=3B11BDEB7DF264E31EA7AF4179F260AA HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.live.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&MUID=3B11BDEB7DF264E31EA7AF4179F260AA
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=3B11BDEB7DF264E31EA7AF4179F260AA; domain=.bing.com; expires=Sun, 25-Feb-2024 12:11:45 GMT; path=/; SameSite=None; Secure; Priority=High;
SRM_B=3B11BDEB7DF264E31EA7AF4179F260AA; domain=c.bing.com; expires=Sun, 25-Feb-2024 12:11:45 GMT; path=/; SameSite=None; Secure;
SRM_L=3B11BDEB7DF264E31EA7AF4179F260AA; domain=c.bing.com; expires=Sun, 25-Feb-2024 12:11:45 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 207F06DDCDE54D14B426F7EE764305B5 Ref B: OSL30EDGE0320 Ref C: 2023-01-31T12:11:44Z
date: Tue, 31 Jan 2023 12:11:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/hD59D47E04B0E4FAF_App_Scripts/otelNext.worker.min.js
200 OK 28 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/hD59D47E04B0E4FAF_App_Scripts/otelNext.worker.min.js
IP
File type ASCII text, with very long lines (49363)
Hash 2a1ba2ab605488b35a8ec03256445b64
f670eacd0f07f0b927025ffd9170b772014a113c
438119510339e66ea0945ce087f9158eeb4145f887e3d9128e6ccfbd9c2c6859
GET /wv/s/hD59D47E04B0E4FAF_App_Scripts/otelNext.worker.min.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 28547
content-type: application/javascript
content-encoding: br
last-modified: Thu, 26 Jan 2023 00:09:10 GMT
accept-ranges: bytes
etag: W/"789f76a1a31d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 495994db-70ad-4384-9892-14d92a2a7af6
x-usersessionid: 495994db-70ad-4384-9892-14d92a2a7af6
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AE6
x-officeversion: 16.0.16118.41011
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011AE6
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 87B4CC20141C419DAEEDF8705627CD71 Ref B: AMS231032606025 Ref C: 2023-01-26T00:09:09Z
date: Tue, 31 Jan 2023 12:11:45 GMT
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
200 OK 48 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
File type ASCII text, with very long lines (44104)
Hash a273e4b2a17e2e16a580d8c11ed5e018
0b30a28853c8ebaf3f0e0bbddda9589aa807ba69
3a02e869b534743030650168c93da1608f6e4cb477f239eb154573765581543b
GET /wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 47464
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:22:41 GMT
accept-ranges: bytes
etag: W/"602d28f67332d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: fde003d4-cd99-4f6a-895e-4ccfd2fb5825
x-usersessionid: fde003d4-cd99-4f6a-895e-4ccfd2fb5825
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ADE
x-officeversion: 16.0.16123.41006
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011ADE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9B1456028C6C46CFBCB3EF4A7C64C49D Ref B: AMS231032605033 Ref C: 2023-01-27T17:22:41Z
date: Tue, 31 Jan 2023 12:11:45 GMT
X-Firefox-Spdy: h2
c.live.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&MUID=3B11BDEB7DF264E31EA7AF4179F260AA
200 OK 42 B URL HTTP/2 c.live.com/c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&MUID=3B11BDEB7DF264E31EA7AF4179F260AA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?DI=15347&wlxid=bc624103-4657-4c69-8868-1598559303a8&reqid=002f466ec45&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D748622%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D3816%26IR%3D1%26EX%3D0%26L.h%3D1007%26L.bc%3D1142%26L.ac%3D1142%26L.f%3D1160%26L.sjs%3D3731%26L.ttg%3D3086%26C.st%3D1675167117200%26N.jsPlt%3D2523%26N.domIn%3D1158%26N.req%3D793%26N.resp%3D5%26N.navType%3D255%26N.redirectCount%3D0&r=0.7003365315401965&CtsSyncId=9ABB86BAC0114140BC6CDFFE80F7FA65&MUID=3B11BDEB7DF264E31EA7AF4179F260AA HTTP/1.1
Host: c.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Connection: keep-alive
Cookie: SM=T; MUID=3B11BDEB7DF264E31EA7AF4179F260AA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 17 Jan 2023 20:36:49 GMT
accept-ranges: bytes
etag: "b1c8df6cb32ad91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=C; domain=c.live.com; path=/; SameSite=None; Secure;
ANONCHK=0; domain=c.live.com; expires=Tue, 31-Jan-2023 12:21:45 GMT; path=/; SameSite=None; Secure;
date: Tue, 31 Jan 2023 12:11:44 GMT
content-length: 42
X-Firefox-Spdy: h2
c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
200 OK 30 kB URL HTTP/2 c1h-word-view-15.cdn.office.net/wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
File type ASCII text, with very long lines (24136)
Hash accc377be03d783e40f653a891044d2e
3e0617266b3b6c1a2acd15d57c525fb819218bf7
db66f6a5f864cb7c4761545cb9ded7a279c78461ca80b26603b981e96d97c633
GET /wv/s/161612541000_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: c1h-word-view-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 30538
content-type: application/javascript
content-encoding: br
last-modified: Fri, 27 Jan 2023 17:22:41 GMT
accept-ranges: bytes
etag: W/"e5b23ef67332d91:0"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: bb9c8177-6cec-41fb-ab75-0be08c00c3dd
x-usersessionid: bb9c8177-6cec-41fb-ab75-0be08c00c3dd
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ADF
x-officeversion: 16.0.16123.41006
x-officecluster: PIE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-officefd: DB5PEPF00011ADF
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 0EE81124BF08426BB49B4CED7B9DE1B0 Ref B: AMS231032608029 Ref C: 2023-01-27T17:22:41Z
date: Tue, 31 Jan 2023 12:11:45 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 0 B URL HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-view.officeapps.live.com/
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://word-view.officeapps.live.com
Date: Tue, 31 Jan 2023 12:11:44 GMT
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 933f8a11a0de025b8d4978a91b3d8ce5
eabee5ad0f6982fe465674a4fbc5547d8e0096b6
15fe159b564d7aea28f48dcb0ad9d32863da9cbff6a9c9707e83f05c773e1155
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1675167121793
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 7529
Origin: https://word-view.officeapps.live.com
Connection: keep-alive
Referer: https://word-view.officeapps.live.com/
Cookie: MUID=02FCB0EC723264591CDBA15976326249; MC1=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: -16330
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://word-view.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 31 Jan 2023 12:11:45 GMT
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1675167121818
302 Found 0 B URL HTTP/2 storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1675167121818
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1675167121818 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BP=l=SDX.Skydrive&FR=&ST=; MUID=3B11BDEB7DF264E31EA7AF4179F260AA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
content-length: 0
location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1675167105&rver=7.3.6962.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
x-msnserver: DB3PPF4F90D4C51
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: 17nE7ry+ZEi/gfuNkrLINg.0
x-qosstats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
x-throwsite: 4212.9205
x-clienterrorcode: PassportAuthFail
x-errorcodechain: Unauthenticated
x-asmversion: UNKNOWN; 19.1074.105.2010
date: Tue, 31 Jan 2023 12:11:45 GMT
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1675167105&rver=7.3.6962.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
200 OK 11 kB URL HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1675167105&rver=7.3.6962.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (28846)
Hash 46a4ec3cde158e4324bda9437d96b6cb
85fc94cfa0b902fd8caa15270ef0302105132451
e4a2320e3534398b39d4ac0b97ce38a592c06572906a014bb9799fef60b08ef5
GET /login.srf?wa=wsignin1.0&rpsnv=13&ct=1675167105&rver=7.3.6962.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-view.officeapps.live.com/
Connection: keep-alive
Cookie: MSCC=91.90.42.154-NO; E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BP=l=SDX.Skydrive&FR=&ST=; MUID=3B11BDEB7DF264E31EA7AF4179F260AA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Tue, 31 Jan 2023 12:10:45 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-Frame-Options: DENY
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: bd77082b-2f14-43b5-8ad8-c4d528146d09
PPServer: PPV: 30 H: BL02PF4F5769F85 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=b3ddddf773134d5482175a14c4ac903c; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1675167105&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DSxk2LA*S7xY6qamu1p6JWX93Dp4x8omN1HEj7!tEUAZMnawsOPhda26MsyUgCDF1Wcao6KTfnLHUZg25ESqZ0guOnGOjIEdvhAKSCOxd0OJE!lTsA5PqpNg*VVByWZQ68c3C0yuLaEISAGf6FmkrNvcj3RdzJqLcx2Emse5rCGJJILIbI*4flpwnDXaKY38UusVE4!8GODs1*PqrkeWBJHy9bA*h1yJmbe4MXi*n2qqmh!b6acHHeKDRlsL1nl2JBngoVZMHLASi27fjNINlXg2L8w5wTonUnBXWe7jxd1INcbgJzLE*UY3jGRkKQC0nhSwE7RLoYURXi6XnDw!gWLigw8PbVSiolRkI7vpJNu6bHptWlRtVRhsmF3i8z4Wm6m!5dwIHAVOksaUb8LlzSs7C1KclHIegN3rzIjGgQSSM70OrCfC*eUTynE!3i0*7wjuPxrxPb*jGzZlAo6X5fK0Xp7ilHxfPLHzCCu7wifO; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-ae23043e-043e-436c-bca9-0f262431f42c; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 31 Jan 2023 12:11:44 GMT
Content-Length: 10910
word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
200 OK 0 B URL HTTP/2 word-view.officeapps.live.com/wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wv/RemoteUls.ashx?usid=13acdc30-75d8-4b16-8260-65b2c9bcdb93&officeserverversion=16.0.16127.41003 HTTP/1.1
Host: word-view.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 180
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; ShCLSessionID=1675167121242_0.48886131502282737; MUID=3B11BDEB7DF264E31EA7AF4179F260AA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 36c6c516-d205-477a-b0fb-2fe3c404764f
x-usersessionid: 13acdc30-75d8-4b16-8260-65b2c9bcdb93
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AE2
x-officeversion: 16.0.16125.41000
x-officecluster: PIE1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: B6D1C2E29E47165B5D75AF507A0E5E6EE28A19B4
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19214611,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,509743362,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 458AC1E4283C48D78B215C335547A12A Ref B: SVG20EDGE0418 Ref C: 2023-01-31T12:11:48Z
date: Tue, 31 Jan 2023 12:11:48 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?resid=B226F6AF010CA2EE!112&authkey=!AHaRoisuG3c5CnM&ithint=file%2cdocx
200 OK 0 B URL HTTP/2 onedrive.live.com/redir?resid=B226F6AF010CA2EE!112&authkey=!AHaRoisuG3c5CnM&ithint=file%2cdocx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /redir?resid=B226F6AF010CA2EE!112&authkey=!AHaRoisuG3c5CnM&ithint=file%2cdocx HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:63cPT4QD24g=:naUjW0FCQoAQ1mX8quRAZYeQFAdWmck4AhAmVuResJQ=:F; domain=.live.com; path=/
xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Tue, 31-Jan-2023 10:31:40 GMT; path=/
wla42=; domain=live.com; expires=Tue, 07-Feb-2023 12:11:40 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D6F4DBF
x-odwebserver: northcentralus0-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C3A89861099744D0913C1A8C02F70372 Ref B: OSL30EDGE0407 Ref C: 2023-01-31T12:11:39Z
date: Tue, 31 Jan 2023 12:11:39 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac2-d8541046.js
200 OK 0 B URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20230112.001/wac2-d8541046.js
IP
ASN #20940 Akamai International B.V.
GET /files/onedrive-website-release-prod_master_20230112.001/wac2-d8541046.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 109105
content-encoding: gzip
last-modified: Fri, 13 Jan 2023 00:07:46 GMT
x-ms-request-id: c3826bfc-701e-004b-62a9-2a03c4000000
cache-control: public, max-age=630720000
date: Tue, 31 Jan 2023 12:11:44 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False
200 OK 0 B URL HTTP/2 onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/view.aspx?resid=B226F6AF010CA2EE!112&ithint=file%2cdocx&wdo=2&authkey=!AHaRoisuG3c5CnM
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:CINxT4QD24g=:EJIHav/eZBldoMDkTtPmCegP8Z03vTSP8PKrtEYyJos=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=2; wla42=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Wed, 31 Jan 2024 12:11:41 GMT
vary: Accept-Encoding
set-cookie: mkt=en-US; domain=.live.com; expires=Wed, 31-Jan-2024 00:00:00 GMT; path=/
xidseq=3; domain=.live.com; path=/
LD=; domain=.live.com; expires=Tue, 31-Jan-2023 10:31:41 GMT; path=/
E=P:8ODvT4QD24g=:8df0CmiI7ykWeW/o38UXB8L+R+S5hLWRJRTB4ryDveQ=:F; domain=.live.com; path=/
wla42=; domain=live.com; expires=Tue, 07-Feb-2023 12:11:41 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D748622
x-odwebserver: northcentralus0-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 52EE03A5FE3A491CA7ED1440A9F28A24 Ref B: OSL30EDGE0407 Ref C: 2023-01-31T12:11:41Z
date: Tue, 31 Jan 2023 12:11:40 GMT
X-Firefox-Spdy: h2
onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False
200 OK 0 B URL HTTP/2 onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/view.aspx?resid=B226F6AF010CA2EE!112&ithint=file%2cdocx&wdo=2&authkey=!AHaRoisuG3c5CnM
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:CINxT4QD24g=:EJIHav/eZBldoMDkTtPmCegP8Z03vTSP8PKrtEYyJos=:F; xid=bc624103-4657-4c69-8868-1598559303a8&&RD00155D6F4DBF&63; xidseq=2; wla42=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Wed, 31 Jan 2024 12:11:41 GMT
vary: Accept-Encoding
set-cookie: mkt=en-US; domain=.live.com; expires=Wed, 31-Jan-2024 00:00:00 GMT; path=/
xidseq=3; domain=.live.com; path=/
LD=; domain=.live.com; expires=Tue, 31-Jan-2023 10:31:41 GMT; path=/
E=P:wvfxT4QD24g=:wWR7o0g0OeLRpu0/hqBZx/35CmEWnpXxuDgrMw10e7g=:F; domain=.live.com; path=/
wla42=; domain=live.com; expires=Tue, 07-Feb-2023 12:11:41 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D6F4DBF
x-odwebserver: northcentralus0-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7E0824F41B2E4281A200418079FCEC12 Ref B: OSL30EDGE0407 Ref C: 2023-01-31T12:11:41Z
date: Tue, 31 Jan 2023 12:11:40 GMT
X-Firefox-Spdy: h2
13.107.42.12
20.190.160.13
23.36.79.11
23.13.246.185
20.50.73.9
0.0.0.0