morrisconsultingnz-my.sharepoint.com/:o:/g/personal/john_morris_morrisconsulting_co_nz/EjYIiGzLVvVJtHf7AMoA9Q4BsNy5WZm82yZsj2i_eGFMMg?e=VsyzVi
302 Found 620 B URL User Request GET HTTP/2 morrisconsultingnz-my.sharepoint.com/:o:/g/personal/john_morris_morrisconsulting_co_nz/EjYIiGzLVvVJtHf7AMoA9Q4BsNy5WZm82yZsj2i_eGFMMg?e=VsyzVi
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.sharepoint.com
FingerprintFF:6C:A7:8A:C5:1C:05:82:B7:7F:4B:52:12:7A:46:6A:1C:F9:F3:22
ValidityTue, 29 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (548), with CRLF line terminators
Hash 97ad9ae491d2b33069995bbb9bef793e
1e1966fa90d3e3d0b482bdaedf8944e681f00859
0d79c808886686e992fa976ad964bac53157ba8b9623c61c823fa1fd217ef431
GET /:o:/g/personal/john_morris_morrisconsulting_co_nz/EjYIiGzLVvVJtHf7AMoA9Q4BsNy5WZm82yZsj2i_eGFMMg?e=VsyzVi HTTP/1.1
Host: morrisconsultingnz-my.sharepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private
content-length: 620
content-type: text/html; charset=utf-8
location: https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly
x-networkstatistics: 0,525568,0,0,770,0,24489
x-sharepointhealthscore: 1
x-aspnet-version: 4.0.30319
x-databoundary: NONE
x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/
sprequestguid: e20ab1a0-6062-2000-45ea-81452b9e73da
request-id: e20ab1a0-6062-2000-45ea-81452b9e73da
ms-cv: oLEK4mJgACBF6oFFK55z2g.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=53eb76d0-551a-483a-af00-d8cf77017642&destinationEndpoint=Edge-Prod-OSL30r4A&frontEnd=AFD"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 152
spiislatency: 3
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.23626
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9D5B7940CD90449C9F5DFE7D24183996 Ref B: OSL30EDGE0421 Ref C: 2023-05-09T03:14:58Z
date: Tue, 09 May 2023 03:14:59 GMT
X-Firefox-Spdy: h2
morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
200 OK 46 kB URL User Request GET HTTP/2 morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.sharepoint.com
FingerprintFF:6C:A7:8A:C5:1C:05:82:B7:7F:4B:52:12:7A:46:6A:1C:F9:F3:22
ValidityTue, 29 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (49742), with CRLF line terminators
Hash 597477ee08168c8d2775a3a0adf93616
83a497f67337f56c16cb0d9568973601f0cbb082
b1c61f80b6d0ca12cd26c077a9a3a6d91d63eeca9c33f9c8f62953aa08d19d13
GET /personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10 HTTP/1.1
Host: morrisconsultingnz-my.sharepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEyLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzI2OTE0NmNhYzNkZTRhODgwNjYyODA5NmVhOTFkOTg0MDRkNDFmZmNjODZjYmIxMjJiNjJhNzZmOTNjNTQ3MmQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMjY5MTQ2Y2FjM2RlNGE4ODA2NjI4MDk2ZWE5MWQ5ODQwNGQ0MWZmY2M4NmNiYjEyMmI2MmE3NmY5M2M1NDcyZCwxMzMyODA3NTk5OTAwMDAwMDAsMCwxMzMyODE2MjA5OTg3NTI3OTYsMC4wLjAuMCwyNTgsNTNlYjc2ZDAtNTUxYS00ODNhLWFmMDAtZDhjZjc3MDE3NjQyLCwsZTIwYWIxYTAtNjA2Mi0yMDAwLTQ1ZWEtODE0NTJiOWU3M2RhLGUyMGFiMWEwLTYwNjItMjAwMC00NWVhLTgxNDUyYjllNzNkYSxZZ3RTQ2NWWFRFNlFJbUNCNUFoRS9RLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCxVWFd1Um9idnlhMUdvOUhWRVVIMnEvRHlmN1FzQkxvR1o5R2xBQ3FtVHg0d1BUdUVuS2xwcjgvb3pjZGF6RkY5OG95RDgxMjBWZHBpU284VUkvRXRjOUFyUnExL3IxT2QyMTJlaFpPSUYyUHhJTDRtb0xVL3NsZjVVeW5JTHZnTzJBaWw5Z2paRFlqUDVxSGRhaXIrTDVIaVdVQ3J2Z1dqU3V1N2t5WVpLbnBXODhCcnMrc2xseDMwVXd6VS9IN2VlVWhkS2tSRkZHNXI5WDJKUCs0ZzFWK2hWNzY5czFKNDcxOXFHN1B4WSszOXZVbGswclY5QzVGQWtzdmlHQVZzczFhdUxqMTlubTB2VUN2S3JMUU54ay9KMUVxMDg5MXpJUXBEeTN2Q1RIQ1Y1SFAwN2xjbmpHTHVQRTN1V1JYNEhpMVJzMnIzSmJmQURlU05BTU5PSlE9PTwvU1A+
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 45645
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR", CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEyLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzI2OTE0NmNhYzNkZTRhODgwNjYyODA5NmVhOTFkOTg0MDRkNDFmZmNjODZjYmIxMjJiNjJhNzZmOTNjNTQ3MmQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMjY5MTQ2Y2FjM2RlNGE4ODA2NjI4MDk2ZWE5MWQ5ODQwNGQ0MWZmY2M4NmNiYjEyMmI2MmE3NmY5M2M1NDcyZCwxMzMyODA3NTk5OTAwMDAwMDAsMCwxMzMyODE2MjA5OTg3NTI3OTYsMC4wLjAuMCwyNTgsNTNlYjc2ZDAtNTUxYS00ODNhLWFmMDAtZDhjZjc3MDE3NjQyLCwsZTIwYWIxYTAtNjA2Mi0yMDAwLTQ1ZWEtODE0NTJiOWU3M2RhLGUyMGFiMWEwLTYwNjItMjAwMC00NWVhLTgxNDUyYjllNzNkYSxZZ3RTQ2NWWFRFNlFJbUNCNUFoRS9RLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCxVWFd1Um9idnlhMUdvOUhWRVVIMnEvRHlmN1FzQkxvR1o5R2xBQ3FtVHg0d1BUdUVuS2xwcjgvb3pjZGF6RkY5OG95RDgxMjBWZHBpU284VUkvRXRjOUFyUnExL3IxT2QyMTJlaFpPSUYyUHhJTDRtb0xVL3NsZjVVeW5JTHZnTzJBaWw5Z2paRFlqUDVxSGRhaXIrTDVIaVdVQ3J2Z1dqU3V1N2t5WVpLbnBXODhCcnMrc2xseDMwVXd6VS9IN2VlVWhkS2tSRkZHNXI5WDJKUCs0ZzFWK2hWNzY5czFKNDcxOXFHN1B4WSszOXZVbGswclY5QzVGQWtzdmlHQVZzczFhdUxqMTlubTB2VUN2S3JMUU54ay9KMUVxMDg5MXpJUXBEeTN2Q1RIQ1Y1SFAwN2xjbmpHTHVQRTN1V1JYNEhpMVJzMnIzSmJmQURlU05BTU5PSlE9PTwvU1A+; path=/; SameSite=None; secure; HttpOnly
x-networkstatistics: 0,525568,0,0,1262,0,28439
x-sharepointhealthscore: 1
x-aspnet-version: 4.0.30319
x-databoundary: NONE
x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/
sprequestguid: e20ab1a0-a080-2000-45ea-8fb56409210f
request-id: e20ab1a0-a080-2000-45ea-8fb56409210f
ms-cv: oLEK4oCgACBF6o+1ZAkhDw.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=53eb76d0-551a-483a-af00-d8cf77017642&destinationEndpoint=Edge-Prod-OSL30r4A&frontEnd=AFD"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 179
spiislatency: 0
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.23626
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8473EAE2B5F24D90B98C418C5176477A Ref B: OSL30EDGE0421 Ref C: 2023-05-09T03:15:00Z
date: Tue, 09 May 2023 03:14:59 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/require-9eb54831.js
200 OK 9.6 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/require-9eb54831.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (31038), with no line terminators
Hash 9eb54831a39d725782574c247d3d0206
bafdeaf62ed6f1bc258bde5653ab97fa47062d0b
8f1b49875cdc595d3ef040dab7b12af26195018f1876ac1f17a2443ce594b960
GET /files/odsp-web-prod_2023-04-28.001/require-9eb54831.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 9633
last-modified: Fri, 28 Apr 2023 08:43:14 GMT
x-ms-request-id: 24203e4b-b01e-0019-7e46-7c7f2c000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-28.001
x-ms-meta-sourceid: 5DA92AC3B91CB279600B0644A84B620C7912261BB695E5485B0ECA8B0D4648B100
content-encoding: br
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:00 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602100.5a2e60c"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js
200 OK 36 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 07363c7cf06545f4a58eb7d41acb4f3f
fdeba6be6fca1dac6c6f43980893b20d296644c0
4fa2592eddf2421b7017c058288ffa268ddf93756a1a3b20c1be73be08989e12
GET /officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 35620
last-modified: Thu, 13 Apr 2023 05:23:16 GMT
x-ms-request-id: bcf8b2a6-801e-0012-2cfb-718447000000
content-encoding: br
date: Tue, 09 May 2023 03:15:00 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602100.5a2e60e"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
200 OK 7.9 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 7a7a4890caaa77025e1b33a6d6e474ee
dc735b99d9ef0c76b4a7aeae8baa4cbd9551ba77
9e1da5bf715135491519a188cad977db6cba414071e2407b69d63221379d8802
GET /officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Wed, 26 Apr 2023 14:46:21 GMT
x-ms-request-id: d2f40b67-d01e-0020-3e01-7c8430000000
date: Tue, 09 May 2023 03:15:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602101.5a2e647"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/wachostwebpack/en-us/plt.resx-plt.js
200 OK 571 B URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/wachostwebpack/en-us/plt.resx-plt.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1695), with no line terminators
Hash e4a697357dbf57da0adb4cf064505664
12e36dc91ce3f05b34662df947c6d38694a58738
aa2c12e8c881339b1297784f35fd2d1605f82f0360734d96f69add0989b5d03d
GET /files/odsp-web-prod_2023-04-28.001/wachostwebpack/en-us/plt.resx-plt.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 571
last-modified: Fri, 28 Apr 2023 08:45:55 GMT
x-ms-request-id: 9c05f260-701e-0016-0a6d-7c0940000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-28.001
x-ms-meta-sourceid: 07BF011C12616F2F86415642780DE3E2DEC4BBAD5EEB80BDE0755C51136491FE00
content-encoding: br
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:01 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602101.5a2e64a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/wachostwebpack/wachostwebpack.js
200 OK 225 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-28.001/wachostwebpack/wachostwebpack.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65464)
Size 225 kB (224751 bytes)
Hash ed3d7a10a0810d2b0e5cfb2c7f30d413
a3c6108f693efb7bed0cce2c5c231c7f10c4a64d
44bf84874c81ca1b60c9b57836f72ab079e3b043380d4a9ba2eb2fb6c4596ab0
GET /files/odsp-web-prod_2023-04-28.001/wachostwebpack/wachostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 224751
last-modified: Fri, 28 Apr 2023 08:45:53 GMT
x-ms-request-id: a11f4820-601e-0047-406d-7c94cc000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-28.001
x-ms-meta-sourceid: E97D772E5B71B0900FEB4BADE2987F494CB446EF93799CFDBC3CFE63A07D22CC00
content-encoding: br
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:01 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602101.5a2e64f"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (52383), with no line terminators
Hash c8f80bb03b9e93226dbb566ca0df404c
7d0e6f533c17ffd0265f33ecea4546c6318f4df2
29c139c798e127a335aa7d960798c1a7fb41a455bbf89cdd56a540d957b794d4
GET /files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 13430
content-encoding: gzip
last-modified: Fri, 07 Apr 2023 08:48:26 GMT
x-ms-request-id: a7821c69-501e-0011-65e3-6b6523000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-07.001
x-ms-meta-sourceid: D8186005210E49AB50C11AE3513BB5A0CE9E140E9ED8BD1CDFCEEAF54A83D3E800
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:01 GMT
vary: Accept-Encoding
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602101.5a2e64c"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-32072d62.js
200 OK 43 kB URL GET HTTP/2 res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-32072d62.js
IP
ASN #20940 Akamai International B.V.
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65455)
Hash f5cf851afd681efa56b5b0045008935e
9e1015d59b9d8c15a955a0278d2b04fb1b9987fc
4c701c85cfb31cc6505109be1b564b44e2775c37bf3543c769a4b5bdc90ba279
GET /files/sp-client/odsp.react/odsp.react.lib-32072d62.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 42629
content-encoding: gzip
last-modified: Fri, 10 Mar 2023 08:59:07 GMT
x-ms-request-id: 0bcf1ae9-f01e-0045-6acc-552a74000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-03-10.001
x-ms-meta-sourceid: 4A88142A6FA3972FB897026AA720C087B05E895FA7BF571DE96E6FB06B9111FA00
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:01 GMT
vary: Accept-Encoding
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602101.5a2e64d"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:1C:80:C1:AA:37:77:D8:FC:EC:2A:BD:73:2B:6C:84:D4:D0:72:27
ValidityWed, 08 Mar 2023 09:02:43 GMT - Sat, 02 Mar 2024 09:02:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 3690
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 628
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Tue, 09 May 2023 03:15:00 GMT
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2033
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1a4f88ab-9cb9-4ae3-8808-96a462a3e7ce
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://morrisconsultingnz-my.sharepoint.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8458642,17085210,17085216,17162522,17358857,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,50619726,51451613,51492170,51504083,51667010,306230939,306978834,508893266,509096994,509203553,509437535,509743362,510252435,512278607,512278610,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: B9891A23D02343E49C8FAA726497EB59 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:01Z
date: Tue, 09 May 2023 03:15:01 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 118
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf;Path=/;Domain=auc-onenote.officeapps.live.com; samesite=none; secure
x-correlationid: 40646dbd-edd7-4b49-bc44-be6a79eb954e
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: ML1PEPF000046A9
x-officeversion: 16.0.16412.41013
x-officecluster: GAU3
access-control-allow-origin: https://morrisconsultingnz-my.sharepoint.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: ML1PEPF00009921
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 25604445452C42EEAC48EE240A4AAAC9 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:01Z
date: Tue, 09 May 2023 03:15:01 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
200 OK 4.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (27024), with CRLF line terminators
Hash a230e20feecbb758d7c13303a657eedd
f12606cce8600d9dfb5316610ee5177ba51b0ce9
816a0f42a2bf473213a47be1dde62215811d54af1151a1e9916dc215df6ec776
GET /officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 4702
content-type: text/css
last-modified: Wed, 26 Apr 2023 14:45:29 GMT
x-ms-request-id: 1484633d-f01e-0037-18ec-7c2d3b000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e79a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css
200 OK 54 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9abb3c3a188255e5073b5dd12779a984
b7e6fdd6b849278ae5ecf6e6c4735fa1211a37f6
2370440c296e813c3447201f6e9a491ff4c69716c25cedbe9a8db773650df313
GET /officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 53783
content-type: text/css
last-modified: Thu, 13 Apr 2023 05:26:40 GMT
x-ms-request-id: d0dad342-501e-0001-0b09-6ea04b000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e79b"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (54497)
Hash 12271b82a7dc347800e8763e723222e7
9ca96e0ebfe6eb16e98d938ae8eaf1f38e5e358e
5e4e81520a909af4df21f5ae0a468a94f43b28b36bdaa2ff627bb7304d8a4469
GET /officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 13427
last-modified: Thu, 13 Apr 2023 05:23:34 GMT
x-ms-request-id: 15d9c465-b01e-0036-270b-7272e7000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7a3"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js
200 OK 40 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (49621)
Hash ac00af6ee54ad100cb6090612810038d
182e8f07efc3cad2f4e12aa312aba0625b0fe6c1
852f0636531eee15fa50a5615c70d378dd8893b5345a97c8d4328f7ae1270e0f
GET /officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 39561
last-modified: Thu, 13 Apr 2023 05:25:01 GMT
x-ms-request-id: 9087fa7e-401e-001d-2119-6ef22b000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7a4"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 5398e935b5536e5219298d527a3a5654
0e7cea73e9d31251b5b884ac934a125aa707905e
83ec8e5f8a3d30098514d5f3e0aa4905d1eba0518404d92d6f1a9d6adc087fcf
GET /officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 27785
last-modified: Wed, 26 Apr 2023 14:40:55 GMT
x-ms-request-id: a7c34d35-701e-0064-7eec-7c0e0f000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7a5"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e14c2adcf3492e9f7b4be98bcfb22019
f33c5c8af0caf6c4c537699c53e418d7e1de9c91
9a640f82b370299168f312acd352a6054165c5dd9a840aa123d11e25f1de4caf
GET /officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31849
last-modified: Thu, 13 Apr 2023 05:29:01 GMT
x-ms-request-id: c1ee2cf8-401e-000d-45f8-773743000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7bc"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ed943d5d2ac5cc29a757d17151b4aedf
977e91c43a356f0b4904b95257cbd2f40109fc57
63dd56f3589796d27e67470f04c09333a48667f1d66466b0fdec6c4782785005
GET /officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 12903
last-modified: Wed, 26 Apr 2023 14:46:09 GMT
x-ms-request-id: d44c5cea-d01e-0020-72ec-7c8430000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7be"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js
200 OK 1.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6042), with no line terminators
Hash a55176635e66b80522e25e4ccca05a90
48aa2527313440869a4ce79e0c0d2329903c4c08
cba89239522795d55fcf43087637399562c8fb25cf3baadf59f488bb97bffd6d
GET /officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1373
last-modified: Wed, 26 Apr 2023 14:42:03 GMT
x-ms-request-id: f7d317c4-e01e-003b-7e2d-7dba33000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7bd"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js
200 OK 6.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (37189), with no line terminators
Hash bcc096c9f75fe7fbb5503a2a6f220c1b
0e4d4c2035ac45205fdba46992447b182ea5cf04
5930d7a90d3a61cc7b7f19824f3cf09ddbb2eb021fed7adeaff4f5008380abb0
GET /officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6718
last-modified: Wed, 26 Apr 2023 14:44:10 GMT
x-ms-request-id: f7c80cef-e01e-003b-632d-7dba33000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7c0"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
200 OK 5.0 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (29971), with no line terminators
Hash 644d85f3508f0a57fb7b9b7ef5dda3e5
4aa8d29b60b62ab601ee4b39c664d6f3b7ca1136
29db8ad8c3f0896786480626880dc28d2d26860119d93fe2919fdba45d3a0c5a
GET /officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 4977
last-modified: Wed, 26 Apr 2023 14:40:47 GMT
x-ms-request-id: 6b64f006-901e-0021-11ec-7cdbec000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7bf"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js
200 OK 3.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10912), with no line terminators
Hash 503dbbcc83eeb2b323238c330124f30e
3b6a7c8d5d2016c391cadf7176a4acaf6104c0fd
cf8e38af39f430eabdce3ce75277990346a5127907562ee3f30640aba82e9798
GET /officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 3414
last-modified: Wed, 26 Apr 2023 14:41:38 GMT
x-ms-request-id: 783b81d0-c01e-0003-62ed-7c1ef3000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7c2"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js
200 OK 892 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1354)
Size 892 kB (892250 bytes)
Hash 26efe2ce03577695908fa1d281e0a511
31dac4241fc7e30961abbb8e9486f9a259c3fab3
55e2f824b46dffc09aa36dd307e7a518c069c9f2b1adb8d7b910b456f2fb7d6d
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 892250
last-modified: Thu, 13 Apr 2023 05:24:31 GMT
x-ms-request-id: 45fe6859-a01e-0015-16e4-6de824000000
content-encoding: br
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e7c1"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.8 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 2796, version 4.30147\012- data
Hash f7a3882336d73698919566847d10ba2f
25e0f263ff150bcced6c00163b2a4934cc0dccf7
0a8049c5627a132d4c0be08579b2a33f7e8fd285a122795cabadabf08ddb6858
GET /officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2796
last-modified: Thu, 13 Apr 2023 05:26:38 GMT
x-ms-request-id: 7ed05a75-901e-000e-058f-72d627000000
date: Tue, 09 May 2023 03:15:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602102.5a2e80e"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":1,"Value":"SessionStarted","Type":"SessionBoundary"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 79cbbfdb-b12b-4a75-9daf-7ab2794417f9
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 54E99E0164CC4257AA2EB705E09F6CB4 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:02Z
date: Tue, 09 May 2023 03:15:02 GMT
content-length: 0
X-Firefox-Spdy: h2
onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%252EeyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359
0 B URL onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%252EeyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359 HTTP/1.1
Host: onenoteonlinesync.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://auc-onenote.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qzIp+sayqpzVTuMXEVy3Ng==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-CorrelationId: c8da37be-10a3-486e-83ed-70e5605756ad
X-UserSessionId: c8da37be-10a3-486e-83ed-70e5605756ad
X-OfficeFE: OneNoteOnlineSyncServiceEngine_IN_16
X-OfficeVersion: 16.0.16501.40455
X-OfficeCluster: weu-002.onenoteonlinesync.onenote.com
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-AspNet-Version: 4.0.30319
Sec-WebSocket-Accept: QUOy8Gussu/SspphjmG9HJyUbZ4=
Connection: Upgrade
X-Powered-By: ASP.NET
Date: Tue, 09 May 2023 03:15:02 GMT
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":8,"Value":"https://res-1.cdn.office.net:443/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css","Type":"ResourceDownloadSuccess"},{"Index":2,"MsSinceStart":121,"Value":"Making GetCells Request","Type":"BootLogs"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6c16dca8-631c-476f-befb-a1fb4e0cc8ea
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: DBD7A33D651145BBB7317D4553EF45B1 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:03Z
date: Tue, 09 May 2023 03:15:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common.min.js
200 OK 119 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (43792)
Size 119 kB (119246 bytes)
Hash 183dd69b91ff5d9c37337cc03d5581d0
fad13e7511bc70844d4a17e08b923eca2a7323d9
8afc2ccf829901f961f193d7b2f8f1aee9c4c4697569a784d64120c06656540b
GET /officeonline/o/s/161641241013_App_Scripts/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 119246
last-modified: Thu, 13 Apr 2023 05:23:21 GMT
x-ms-request-id: 15987596-601e-000a-31e4-6d5b20000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e8e0"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js
200 OK 54 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36909)
Hash d658a1363abc4440b76ec8b349a79dc9
c853f3eac130b8bfa9f3bcd30a44cc289ba6b7c7
a7bd98be0d5823933f1a9308530daf9963037cc85c0ffee36dafad13916fff3c
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 54421
last-modified: Thu, 13 Apr 2023 05:23:37 GMT
x-ms-request-id: 55ffdd7d-301e-004a-72e4-6d5c18000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e8ea"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js
200 OK 26 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36909)
Hash 9057f63e08825b034034c7b1a673dbae
773bac9df965ff6ef4ecbca62ebca8484e44240a
1a9d59bed672fa868086c71975e2175dc45e0e7980ecb8bcf9589b657bd3c5e3
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25862
last-modified: Thu, 13 Apr 2023 05:25:01 GMT
x-ms-request-id: 0eeae018-901e-0021-74e4-6ddbec000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e8eb"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChrome.min.js
200 OK 193 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 193 kB (193424 bytes)
Hash 393c92b1fccb95435cea8019c4fd5093
dcce483ff06fe0b616b02b01d6d325276018cbd3
7b85e3e5bbfa548b42e017ffe249e083467a47daab3b46d8d0d529189609e7c3
GET /officeonline/o/s/161641241013_App_Scripts/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 193424
last-modified: Thu, 13 Apr 2023 05:24:19 GMT
x-ms-request-id: 3576afb7-101e-003f-6ae4-6d3734000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e8ec"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/progress.gif
200 OK 695 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 24 x 24\012- data
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/o/s/161641241013_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 695
content-type: image/gif
last-modified: Thu, 13 Apr 2023 05:24:02 GMT
x-ms-request-id: 7db63be2-d01e-001f-0de4-6d4c93000000
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e914"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js
200 OK 6.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (41569), with no line terminators
Hash 345bff8d2e34511694d9d12a008f5f5d
b3f35302052c26c285c43b935bce972904e62e28
dd4039f8afac6fd76b462c4fd4f90374b18db762719108491ac2e365196d71ac
GET /officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6113
last-modified: Thu, 13 Apr 2023 05:24:19 GMT
x-ms-request-id: de931792-c01e-0003-3de4-6d1ef3000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e917"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box42.png
200 OK 6.3 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box42.png
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /officeonline/o/s/161641241013_resources/1033/m2/box42.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6336
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:29:17 GMT
x-ms-request-id: ea999b2d-301e-005a-0ee4-6d9970000000
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e919"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js
200 OK 1.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7373), with no line terminators
Hash 19998b35a2604e35a613a8b3ffcccafb
bed6ce8b4026b23d095d8d61da8bf2e79b008d4f
6e2826daea6ca98ad26c31b8acb4c4c439857d7575fa9aa704cc7c16662ab0ec
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1680
last-modified: Thu, 13 Apr 2023 05:24:18 GMT
x-ms-request-id: e447bda9-701e-0029-2045-73c1e3000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e91a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff
404 Not Found 215 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 5878d6762a6fe7b1a7135649b29a69b6
22cb9ed9a123a39353b3f2fc099146bd8a31a87d
9055c55510d36cce6465236881600b8ded5d8120079aea331ef05133f149dcc8
GET /officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 215
x-ms-request-id: ad7dc514-f01e-0015-0224-82dd72000000
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e916"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
200 OK 1.3 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4174)
Hash 4e3234d2a1c50a00d46207ab0e255f2c
9ed4b04beffa09f62cf254f56a5120a97954732e
83a01e6c86b10a1b529cd1938a92f0613c4722bd3a86be2cff4c38fae8fcdd25
GET /officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1336
last-modified: Wed, 26 Apr 2023 14:42:21 GMT
x-ms-request-id: 1fb5911f-401e-0040-31ec-7cf8af000000
content-encoding: br
date: Tue, 09 May 2023 03:15:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602103.5a2e928"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":1175,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 472e6f96-3e5a-46f9-b126-f683709bcd27
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: 164A4CFAD1E847FCADB20FB22E40914B Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:03Z
date: Tue, 09 May 2023 03:15:03 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box43.png
200 OK 1.9 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box43.png
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /officeonline/o/s/161641241013_resources/1033/m2/box43.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1922
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:30:18 GMT
x-ms-request-id: f3414554-101e-005d-26e4-6df513000000
date: Tue, 09 May 2023 03:15:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602104.5a2e929"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf
404 Not Found 215 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash dc3f07ee5874c6f304c29bceece37a58
0c1fd33ddd40df95633d86c25830d75bbfea9a0e
19ac27821445dec03089f636bcad4613f20b744f0832f85cd3aae3362eb1bb47
GET /officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 215
x-ms-request-id: 40674b22-201e-0064-4d24-823b59000000
date: Tue, 09 May 2023 03:15:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602104.5a2e92f"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/x-font-ttf
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/navigation.min.js
200 OK 80 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/navigation.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 8bb12f181b5f5fc352964dcf7024921d
e7029f9f1846dc285ef0f981d5cf896ef5c31e41
9c7e960a6ea23f849b5add9f4d887cf2fe73e0fa4d920f2a8ef58ead3d62cb6a
GET /officeonline/o/s/161641241013_App_Scripts/navigation.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 80350
last-modified: Thu, 13 Apr 2023 05:23:33 GMT
x-ms-request-id: 0eeae221-901e-0021-53e4-6ddbec000000
content-encoding: br
date: Tue, 09 May 2023 03:15:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602104.5a2e939"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/OneNote.ashx
200 OK 84 kB URL POST HTTP/2 auc-onenote.officeapps.live.com/o/OneNote.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65531), with no line terminators
Hash 59fbb7bbabe10f2a1efb533e1a6e7748
04125e2a980d9cf79466ca0cec0f357004a6597c
6e05434e2ed7e61119d025a0ac373c18c3a7c0459904a511fd3cdc92a228be13
POST /o/OneNote.ashx HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
Content-Type: application/json; charset=utf-8
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-UserType: WOPI
X-WacCluster: GAU1
X-WacUserAgent: MSWACONSync
X-ServerSideRendering: RenderingNoImages
X-SessionStartDimensions: {"Application":"OneNote","Browser":"Firefox","BrowserMajorVersion":"111","BrowserVersion":"111.0","Host":"SharePoint Online","IsSynthetic":"False","Os":"Linux","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"SHARING.CLIENTREDIRECT","UserSessionApplicationMode":"Edit","WACDatacenter":"GAU1"}
X-Requested-With: XMLHttpRequest
Content-Length: 4197
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 83728
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 15c8abf4-c230-4895-b250-e1adb8aa5c06
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF000017F9
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF000017F9
x-wacfrontend: SY3PEPF000017F9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C49E99CA79B94E7988E2BA9080FFE656 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:02Z
date: Tue, 09 May 2023 03:15:03 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/one.png
200 OK 51 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/one.png
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced\012- data
Hash eca50172a6583b16e553e9917fb710fb
2fd7fb2ff5c10e17e9066ce6bd2393e1f6b93cc0
fff5919a2cbaceae0528522b6c73e4f1d549ca8ee13c680b50ed377dfd2b61f0
GET /officeonline/o/s/161641241013_resources/1033/m2/one.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 51120
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:29:36 GMT
x-ms-request-id: af3d03f1-f01e-0037-7ce4-6d2d3b000000
date: Tue, 09 May 2023 03:15:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602104.5a2eb67"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
500 Internal Server Error 1.2 kB URL GET HTTP/2 auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d29fa9f2ab3a72f2608e8e82c8c3d1c6
8b21cc06752837b4b6b8fef8d54f50eb2c7cca8f
e1b0a10649c4b92f828523efc2ebe135ea9488179a2816888d1e84f786202dbf
GET /o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: false
OrgIdSiteUrl: https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: be71b4cd-ff73-493e-8208-f3f619a115df
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: BA755F5169724A37A732ED061D8250FE Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:04Z
date: Tue, 09 May 2023 03:15:03 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
200 OK 109 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65443)
Size 109 kB (108830 bytes)
Hash 92054b9708967e2e5044ef045392c1ac
ba046c661d35cb467670556c72a9df0d36ba4943
dfbb1bd22a76d33a16825d0b13052795acf3d5b1a1c25e00189eac019a80848a
GET /officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 108830
last-modified: Thu, 13 Apr 2023 05:29:30 GMT
x-ms-request-id: f807ca3b-801e-0060-16e4-6d8308000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2eb93"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:1C:80:C1:AA:37:77:D8:FC:EC:2A:BD:73:2B:6C:84:D4:D0:72:27
ValidityWed, 08 Mar 2023 09:02:43 GMT - Sat, 02 Mar 2024 09:02:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 10758
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 286
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Tue, 09 May 2023 03:15:04 GMT
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":2133,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":6,"MsSinceStart":2139,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b34bc220-ec9d-4070-8ecc-029f10be33ed
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: CAD3EE9DD2114E109562C73684077DE7 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:05Z
date: Tue, 09 May 2023 03:15:04 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/null&DataUrlEnabled=true
302 Found 182 B URL GET HTTP/2 auc-onenote.officeapps.live.com/o/null&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f29c7f86f0b88e59225b9445c99bacd4
d8a0cba034f4e64e764e311ee5a9689d855a2a93
a57dcdb357d4306cc833fdf2f4f418a54a68157fd6001435ecea901e50ec50d2
GET /o/null&DataUrlEnabled=true HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 182
content-type: text/html; charset=utf-8
location: /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
set-cookie:
x-officefd: SY3PEPF000017F9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 8FA72077DFF44CA69579B0130AFD1588 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:05Z
date: Tue, 09 May 2023 03:15:04 GMT
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 125
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6fa7b279-7a01-4b55-9e3f-b7436138dbb8
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://morrisconsultingnz-my.sharepoint.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AAF47EFF12EA4472B64CA57BBB16292F Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:05Z
date: Tue, 09 May 2023 03:15:04 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0\012- data
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Wed, 14 Dec 2022 21:53:31 GMT
x-ms-request-id: 033fcb58-501e-002e-0f51-14ad80000000
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:05 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ebcc"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/2 res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0\012- data
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Wed, 14 Dec 2022 21:53:29 GMT
x-ms-request-id: be8dc609-f01e-0037-2851-142d3b000000
cache-control: public, max-age=630720000
date: Tue, 09 May 2023 03:15:05 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ebcd"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common50.min.js
200 OK 245 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 245 kB (244968 bytes)
Hash 84d433f9cee5ce93bab6ce15942f349d
2dd1903c123687a64b662ec17d2628bc13e55387
9bc14ce1784b12876f2f9cff93d30b987530fbd6cfa4240adcfeb6e074f43f0d
GET /officeonline/o/s/161641241013_App_Scripts/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 244968
last-modified: Thu, 13 Apr 2023 05:24:28 GMT
x-ms-request-id: 0e192b40-801e-005f-69e4-6d4bab000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ec0b"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js
200 OK 130 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 130 kB (130121 bytes)
Hash 878c2e52ef3615d20b70f8f021a65680
5bb2d24c5d18f64d89975aa56d54a739e6463bfb
38a0a83b4c66b204e6971bbdb50451c39f1acd0f00d7507aeb81c505103b2087
GET /officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 130121
last-modified: Thu, 13 Apr 2023 05:23:40 GMT
x-ms-request-id: 817f91ac-801e-0060-4346-738308000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ec0d"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js
200 OK 95 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Hash b36bf186a062b6de0ce838ed8255791a
595774bb9b67d082ddc003424b94f1eb2e7606eb
d39de3d79f04a8dfb8a89aae5ce89e7a4a0753b6f1234a8c7d051feb88de781b
GET /officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 94951
last-modified: Thu, 13 Apr 2023 05:24:14 GMT
x-ms-request-id: f807df46-801e-0060-52e4-6d8308000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ec0f"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
200 OK 51 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ecbf3b46242f3f0e8d9e6a61ebff525
3799b14c4e063a93dac8c6760a966a6d970a8544
7a306c649ce6eb26011cb2b47dbab71d66bc6f01c7a4870a3b3b7726aa78ffe1
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 51354
last-modified: Thu, 13 Apr 2023 05:23:19 GMT
x-ms-request-id: 827e34d0-a01e-0058-0d46-7327c8000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ec1e"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js
200 OK 62 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36667)
Hash d332761b25c06f6f73613bc1a4a8cfa2
5e078128afddf2c0bf6f0db55e510b91fbb18ae7
79744dbebc39c64e4a2be9023a33433a8370071ad3b2e638760faf2abd857d99
GET /officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 62430
last-modified: Thu, 13 Apr 2023 05:23:54 GMT
x-ms-request-id: 2d3a6aff-901e-006c-789f-6e1400000000
content-encoding: br
date: Tue, 09 May 2023 03:15:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602105.5a2ec20"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&officeserverversion=16.0.16412.41013 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4133
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bca5af2d-a46c-4823-a857-345ea2c1a920
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A73
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://morrisconsultingnz-my.sharepoint.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8458642,17085210,17085216,17162522,17358857,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,50619726,51451613,51492170,51504083,51667010,306230939,306978834,508893266,509096994,509203553,509437535,509743362,510252435,512278607,512278610,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A73
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: FEE029E4D7E24C95A0D5445B4BC0B36A Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:05Z
date: Tue, 09 May 2023 03:15:05 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 16265
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: dbbf793f-8c06-4426-a298-7871b4e3c380
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6D
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 1677BE5692F74E4D8365C1A5AF4AAF36 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:05Z
date: Tue, 09 May 2023 03:15:05 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js
200 OK 473 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3657)
Size 473 kB (473378 bytes)
Hash d851af07037d153337d97b547b9f1781
0a441d81c6c378875fa52cb0911a098efd563f93
ca965a9b262073ef981c98c9675593161dbead1e5d4fe7ef511d7a841a70ba40
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 473378
last-modified: Thu, 13 Apr 2023 05:24:13 GMT
x-ms-request-id: 3930ae80-201e-0024-4de4-6d0937000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec43"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":7,"MsSinceStart":2569,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d8dff07d-3e65-4fd0-8d3a-a12ec38ec0d2
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C8BBD8EC6547453ABDEE3B906314B1B1 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:06Z
date: Tue, 09 May 2023 03:15:05 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044
200 OK 0 B URL POST HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:1C:80:C1:AA:37:77:D8:FC:EC:2A:BD:73:2B:6C:84:D4:D0:72:27
ValidityWed, 08 Mar 2023 09:02:43 GMT - Sat, 02 Mar 2024 09:02:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 3248
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 360
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Tue, 09 May 2023 03:15:05 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js
200 OK 46 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash 12eaabc47ce97e1e94fb3160d68fe7a7
63d2e764b856b5273dc1dd7ed8f4907b83ebc2f3
95168c4a784528f0014207fa1017a96481bcd579b8124f43566fd96da49ce059
GET /officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 46125
last-modified: Thu, 13 Apr 2023 05:24:24 GMT
x-ms-request-id: ea99baa0-301e-005a-3fe4-6d9970000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec68"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js
200 OK 14 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (61839)
Hash efe6061662460bfe701949f78c09364a
9a5e44003b4c1da7eab1e5d90d373350a5067e50
49523496ac3fe04d9d9182c080bc0aa50e8cf4b9b27f9ec5a822ff09be8b329f
GET /officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 14173
last-modified: Thu, 13 Apr 2023 05:24:11 GMT
x-ms-request-id: 54b33130-a01e-0005-5546-732d4c000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec69"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
200 OK 2.1 kB URL GET HTTP/2 auc-onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (3958), with CRLF line terminators
Hash 72104170e9457c995a120bb3e78382f5
463d8efdf5e97345cd5ed7d666739c95e33f2b74
94115b87be04c1761ed7b39058b4b0799cb4afa42e86cfc00f812a9cb3913001
GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 2070
content-type: text/html
content-encoding: gzip
last-modified: Fri, 14 Apr 2023 18:52:49 GMT
accept-ranges: bytes
etag: "8096fd4e26fd91:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 90669689-1988-4f98-b1c7-d6d0f5182228
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-officefd: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_powerpointslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 7416DFA80CAE44D5B8728E367F2D255F Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:06Z
date: Tue, 09 May 2023 03:15:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (49282)
Hash d273ae25b98e69bffa58d8d41530ee18
23e1a8dd4fbd83e74dfd3a015adefaba8ce39b46
c4002ee63f6681d93453eb41016d5dcc7deb9f3c07aaacfdd79bb76abc1ae58d
GET /officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31861
last-modified: Thu, 13 Apr 2023 05:23:33 GMT
x-ms-request-id: cea40bd8-f01e-006a-493b-6e27bf000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec74"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js
200 OK 1.6 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (22080)
Hash b0002c7f9d602e7a56681547ac93f5b4
1e48f8fb5444dc4bd855e7599a3f4ace29596502
015c6de00959b6aa81508ad68eb3dca2efd970a9a341c483f8a8a628045390ef
GET /officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1625
last-modified: Thu, 13 Apr 2023 05:25:15 GMT
x-ms-request-id: 54b10e3f-a01e-0005-6f46-732d4c000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec75"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
www.microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff2
200 OK 34 kB URL GET HTTP/2 www.microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff2
IP
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectwww.microsoft.com
Fingerprint2D:6E:2A:E5:B3:6F:22:07:6A:19:7D:50:00:9D:EE:66:39:6A:A9:9C
ValidityTue, 04 Oct 2022 23:23:11 GMT - Fri, 29 Sep 2023 23:23:11 GMT
File type Web Open Font Format (Version 2), TrueType, length 34052, version 0.0\012- data
Hash 36397a3bc139c6e9f81d383f060f080a
3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
GET /fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1
Host: www.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 34052
content-type: font/woff2
last-modified: Fri, 10 Jan 2020 19:09:43 GMT
accept-ranges: bytes
etag: "588d483e9c7d51:0"
unused62: 8096267
cache-control: public, max-age=1001350
date: Tue, 09 May 2023 03:15:06 GMT
access-control-allow-origin: https://auc-onenote.officeapps.live.com
tls_version: tls1.3
strict-transport-security: max-age=31536000
ms-cv: CASMicrosoftCV2cabd7b8.0
ms-cv-esi: CASMicrosoftCV2cabd7b8.0
x-rtag: RT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js
200 OK 1.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2949)
Hash 90a40515fb4997997d32472503fe30be
e4b8c317090a0fb690e4ca41c593fb05e80f082b
1a1627f8689b66d82234f7b184ce2b5f0f40aced00f7108214ab748d4f6b5983
GET /officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1076
last-modified: Thu, 13 Apr 2023 05:24:45 GMT
x-ms-request-id: 817d6da2-801e-0060-3a46-738308000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec77"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js
200 OK 15 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (59298)
Hash 41f9da9bcbed0530d26587a28987ff90
6597df95f0e9d67418bc84e01564b902bc07df96
aa5632b2e7fe7be268c742fb5f3ce7c9cb0269d9b2435fa13959bd4af9fe95f3
GET /officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 15423
last-modified: Thu, 13 Apr 2023 05:23:31 GMT
x-ms-request-id: 6e13768d-c01e-005e-7ce4-6d1477000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec79"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
200 OK 94 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c7fa6b692a0839b6c99ac8ba07f74b45
af7024e777dae39fcdf0139e95ababd5430fe4cd
3385edfcbb98fb271a7ab82ded6914de81a0cebf065baab6408b2fcc1bd3c648
GET /officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 94232
last-modified: Thu, 13 Apr 2023 05:24:44 GMT
x-ms-request-id: 4e4ed75d-601e-0047-78e4-6d94cc000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec92"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
200 OK 34 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (61584), with CRLF line terminators
Hash 0d4748118dd63f42e80beef0aa95ea11
05ac23356dd9bd532be9e81c201943aedc918a91
b0a2b1973deff290d06e6979672bc24778c7262928e6a63fdd0dcb65bb66fe99
GET /officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 33885
last-modified: Thu, 13 Apr 2023 05:24:06 GMT
x-ms-request-id: 9d6624a9-001e-0041-75e4-6da773000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec93"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js
200 OK 122 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (64817)
Size 122 kB (122014 bytes)
Hash c4da178f7b6b21f9d3b4fbd44ec6d25c
c6a99f96fc5cea66206660dc36d816bcf3869285
f8ca3665a2b7e11fce291905059d17d8b8282e24fe0f9e25fa09857bad020f9d
GET /officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 122014
last-modified: Thu, 13 Apr 2023 05:24:22 GMT
x-ms-request-id: 54b21307-a01e-0005-1546-732d4c000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec96"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js
200 OK 17 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 9cfefb2d46d6102dac2a24c606f47fea
076b63f4f46ce28648201e2507bbc67fb4f990c5
43c5939cb732d8aa2d20fce97f359f46b7c3b937e60ed576b752ae0a2e73314f
GET /officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 16640
last-modified: Thu, 13 Apr 2023 05:23:24 GMT
x-ms-request-id: 8e99fc2e-f01e-0008-2ee4-6de598000000
content-encoding: br
date: Tue, 09 May 2023 03:15:06 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602106.5a2ec97"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 5.1 kB URL GET HTTP/2 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (25305), with no line terminators
Hash 7500ca8e1a1ffe1cd3d1fee1794dcbb5
8f89f1933c355c737a71ff5f218cea0feed5acd3
13b563f7b14c344dc264e62abb8c8576dd3d110dcadaf40fe733dc8d22cb851b
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: bd53843c-85d1-44b4-b1a8-994a21a91de5
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Tue, 09 May 2023 03:15:07 GMT
content-length: 5129
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ecb7"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
500 Internal Server Error 1.2 kB URL GET HTTP/2 auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%2EeyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d29fa9f2ab3a72f2608e8e82c8c3d1c6
8b21cc06752837b4b6b8fef8d54f50eb2c7cca8f
e1b0a10649c4b92f828523efc2ebe135ea9488179a2816888d1e84f786202dbf
GET /o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-6C880836-56CB-49F5-B477-FB00CA00F50E&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
OrgIdSiteUrl: https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c31a5cdd-287b-4a5a-8f1e-7d858137483e
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A73
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A73
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 823F36BFB91A43299D77B972B6C7B40E Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:06Z
date: Tue, 09 May 2023 03:15:06 GMT
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
200 OK 6.0 kB URL GET HTTP/2 auc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Hash d9604cc18f364a6ade707b7faaec642c
f38f0b94764184d4373886fda1ca87d352bfce5a
f282423f48f12f56419363384f3b10002c8d3d106bc1ac8ff721602aa2b2fd9b
GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5979
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 11 Apr 2023 01:01:09 GMT
accept-ranges: bytes
etag: "80f8f619116cd91:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4b10d0e6-f2fa-43ff-a3fe-2da334dd1dbb
x-usersessionid: 4b10d0e6-f2fa-43ff-a3fe-2da334dd1dbb
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: ML1PEPF000046A9
x-officeversion: 16.0.16412.41013
x-officecluster: GAU3
x-officefd: ML1PEPF00009921
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D6D7B8ADA1824834A6DA167741AF04F6 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:07Z
date: Tue, 09 May 2023 03:15:06 GMT
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 16203
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 620acb50-3a66-42b5-b005-430af4ce6a08
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6D
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_powerpointslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: BDFFF8CA90304F6A8EB9F5E93D49A37C Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:07Z
date: Tue, 09 May 2023 03:15:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 41bdabd816d2c4ec9de35b1fefb49481
2a408715541a011e49c8bf82ca41bc66fc1e0a6e
c6b65a2517e5f15ba2d9288646452d02d023150ec41ebccf07872bf44bf22603
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Apr 2023 05:34:39 GMT
x-ms-request-id: 16409890-101e-004d-21e5-6d307b000000
content-encoding: gzip
content-length: 4441
date: Tue, 09 May 2023 03:15:07 GMT
vary: Accept-Encoding
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ecff"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
200 OK 152 kB URL GET HTTP/2 spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 151924, version 0.0\012- data
Size 152 kB (151924 bytes)
Hash e80ff72e03e780056cfdbd85c63404ce
c450a1a6233f0fbc6dbffb7fee251e378f64ef32
05828d625dcb5781d0a3cc67a2429ced535fdf848b8b8075d49751eb5b30c7af
GET /files/fabric/assets/icons/fabricmdl2icons.woff HTTP/1.1
Host: spoprod-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151924
content-type: font/woff
content-md5: 6A/3LgPngAVs/b2FxjQEzg==
last-modified: Fri, 11 May 2018 22:37:14 GMT
etag: 0x8D5B78FBE15F296
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0f112320-c01e-00ca-5b52-2c8e1f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
unused62: 8096267
cache-control: public, max-age=12337497
date: Tue, 09 May 2023 03:15:07 GMT
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
timing-allow-origin: *
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 6959
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fa5d0e22-d947-49fa-8276-90a0dbfad074
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F94C4982BFFC4DF6A41848226CF19507 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:07Z
date: Tue, 09 May 2023 03:15:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js
200 OK 781 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1837)
Hash 75d24f9e7317f73506843d0ab707294c
3e1b1b327c7e4be56b1c68c657ad1ce97bedd89f
55c7d1500ea08e99ba26123bf78596590064ea405087e3b91a084a49160a204e
GET /officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 781
last-modified: Thu, 13 Apr 2023 05:23:25 GMT
x-ms-request-id: 056e863f-101e-0010-5745-733aff000000
content-encoding: br
date: Tue, 09 May 2023 03:15:07 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ed1e"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683602106910&time-delta-to-apply-millis=use-collector-delta&w=0
200 OK 153 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683602106910&time-delta-to-apply-millis=use-collector-delta&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f8538a16200e47b8a0f49b542dbf1f84
c2172a2822441fefb7ad06ae4d302e39f3356edd
aa74fc7b8a6ac435d40a62b3bf25c389297d424632eb2bd6e3b0cda1c0c3d873
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683602106910&time-delta-to-apply-millis=use-collector-delta&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 611
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 153
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: MC1=GUID=22f3a7b68e524a5dbd245b1e2ee87b62&HASH=22f3&LV=202305&V=4&LU=1683602107775; Domain=.microsoft.com; Expires=Wed, 08 May 2024 03:15:07 GMT; Path=/;Secure; SameSite=None
MS0=9d434630721349899e4c09f4e1a33a3b; Domain=.microsoft.com; Expires=Tue, 09 May 2023 03:45:07 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 865
Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://morrisconsultingnz-my.sharepoint.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:06 GMT
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js
200 OK 361 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (697)
Size 361 kB (360568 bytes)
Hash 348efd098d0c6af6a494bda46dd66626
0b58d875fc2652306da7f2b5cde96fbdc65bce3d
6f5a78d98cea1ef79eedaa38dc69d2a321aba0d4c58eaf4375bf5626dca0220f
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 360568
last-modified: Thu, 13 Apr 2023 05:23:28 GMT
x-ms-request-id: a13cf7f9-e01e-0014-49e4-6db7f8000000
content-encoding: br
date: Tue, 09 May 2023 03:15:07 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ed29"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
200 OK 2.0 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7543), with no line terminators
Hash 4c51b6102ec75941c163a79f87e45536
78184c3674390bcd7fe9a306909d276a94ae7c96
86fc2aaa509a1232bf93a6caea92aea0bfc60e857291e7a57576d3427ed24c81
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2024
last-modified: Thu, 13 Apr 2023 05:29:56 GMT
x-ms-request-id: 92fd9080-901e-0031-40e7-6d1e84000000
content-encoding: br
date: Tue, 09 May 2023 03:15:07 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ed2a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
200 OK 78 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65312), with no line terminators
Hash 7e1623baf5c405d6fdb501feccefef2b
7e65c33fd0ee5eb1ce275c980b68050714aa19fd
90208ed29dceaf2ef6221fa41d42119f982ad7329ba7f7036fe587d8d4e79efd
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 78118
last-modified: Thu, 13 Apr 2023 05:29:49 GMT
x-ms-request-id: 295c1908-901e-0043-79e5-6d19cb000000
content-encoding: br
date: Tue, 09 May 2023 03:15:07 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602107.5a2ed31"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 0 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://auc-onenote.officeapps.live.com/
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Date: Tue, 09 May 2023 03:15:07 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
200 OK 48 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (44416)
Hash e0ced31b96d873ed2977699a8a843588
43aa37fb576a568a8857f3992a59fe80272dd91f
ce54c0435f6bb41736fdf5a11a1c2dc450ad32d5277672f42262ef8e3029713d
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 47615
last-modified: Thu, 13 Apr 2023 05:30:05 GMT
x-ms-request-id: 71c0b22f-f01e-0055-22e5-6def1c000000
content-encoding: br
date: Tue, 09 May 2023 03:15:08 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602108.5a2ed57"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 12928
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 25ae297d-51d1-4386-bca5-cbdc07e2c11c
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF000017F9
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF000017F9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9037C9E892754C7087624E368501226D Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:08Z
date: Tue, 09 May 2023 03:15:07 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a33ab50bcc3a87bb64afdd6011f46ed8
1f320b0879bf3de96690b6198716f1a641895d77
4d759e2181902905e5ff0b704fba4d6baba35fa16221f612c3416d2d54a38b9a
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,86258c80efed47d9b34bf77fc663b381-af82a060-b49f-448b-baf0-956ba7709592-7634
upload-time: 1683602106725
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 9603
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1550
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:07 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (21309)
Hash 79c4e59ed15f08912deae30553e28aa0
a7e6cd6709440c648d57b6af2a7b97eb9a00172b
6595729f6b1ffd5a1824115388ef9dc7b70eef861f015c542ecbd000fe86ca62
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 32250
last-modified: Thu, 13 Apr 2023 05:29:48 GMT
x-ms-request-id: 2c9f446b-701e-0029-02e5-6dc1e3000000
content-encoding: br
date: Tue, 09 May 2023 03:15:08 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602108.5a2ed72"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683602108281
302 Found 0 B URL GET HTTP/2 storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683602108281
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
FingerprintE5:81:EB:A6:56:EF:C9:97:67:2C:BA:A0:14:C9:B6:32:2D:FC:0E:5B
ValidityMon, 17 Apr 2023 21:56:35 GMT - Thu, 11 Apr 2024 21:56:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683602108281 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683602108&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
x-msnserver: DB1PPF0948B7D66
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: zmTiPn6iKUSGyvrnSpTxRw.0
x-qosstats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
x-throwsite: 4212.9205
x-clienterrorcode: PassportAuthFail
x-errorcodechain: Unauthenticated
x-asmversion: UNKNOWN; 19.1152.426.2005
date: Tue, 09 May 2023 03:15:08 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9da9464f277cec1e86b565e258e17d42
bc933e8672c85b931f16e136994648b5232aa94d
dada35c879e296846b7745644f559d8182cf0e09eaf1c19d5dc0ce423d0ecff4
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035
upload-time: 1683602108458
time-delta-to-apply-millis: 1550
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3622
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Cookie: MC1=GUID=22f3a7b68e524a5dbd245b1e2ee87b62&HASH=22f3&LV=202305&V=4&LU=1683602107775; MS0=9d434630721349899e4c09f4e1a33a3b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 411
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:07 GMT
login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683602108&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
200 OK 11 kB URL GET HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683602108&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectlogin.live.com
FingerprintAC:32:CF:1B:3D:B4:E1:1D:74:B7:6E:1E:74:B6:48:F3:5E:1B:90:C9
ValiditySun, 02 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (24541)
Hash 4da7b183cc4d4f885ba2fc7ea189c3db
f39ebbe86a73279cb767513502fc05c59ad7e6f7
836a3e792f505a52b35d98303708ff7d50d868c60f4b43091d549083b79c36e1
GET /login.srf?wa=wsignin1.0&rpsnv=13&ct=1683602108&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Tue, 09 May 2023 03:14:08 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-Frame-Options: DENY
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C107_BL2
x-ms-request-id: fa08f1af-6f80-4b52-bf90-60767f560858
PPServer: PPV: 30 H: BL02PFC0A37EDAE V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=2d8ff1c038b34352b4810615c1420318; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1683602108&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Sun, 02-Jun-2024 03:15:08 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-804792d7-e749-4278-86be-0d45bdce09fd; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DfknYTdQuJuqbDCGSUEq8Io4S2uS6LjVqb*sdEXHcY8i1XiHsExJO3JJSahk0DfnQIIbD6r*Rb9*X18JPjjP6EO1QdbR5RDSL*J7j70DVCvoYAMEmRKs0rCiw9BVqzikMD2dxlsDA8Xl*0fsEvpZdIPnI2HaGPlqnch2uwiZq73TxtA9ZI*K49!U2a01xTq7CPY8cklFREcuY0!pTW5hORC8btCUxk*uTMEJJRhiWrGF2DYQQksE!hUnuEqma3O6cEoyW3liAHxLmdlZvSCAngEZv*4!SaMguZ7w*dTGKoo!!WLqIRUl4oA3AL*YkLYgjIIMYrXe7L2Z8MVGW!Et5Cvj5ZbI7BWeqBbQm6VavKVa3zetI6ozluCgBrP7afqndTaBIpPwpkvQwzMU7fOQY*H6EAmUg9Fa7vHMrkXB66SH; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 09 May 2023 03:15:08 GMT
Content-Length: 10857
auc-onenote.officeapps.live.com/o/reportcsp.ashx
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/reportcsp.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/reportcsp.ashx HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 5405
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 300df73b-39fd-4ccd-ba1b-85fff4fc0d37
x-usersessionid: 300df73b-39fd-4ccd-ba1b-85fff4fc0d37
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A73
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A73
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 063F586CDEB34F28A3BFB27CB3392BFC Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:08Z
date: Tue, 09 May 2023 03:15:08 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/afhs/CloudPolicySettings.ashx
200 OK 218 B URL GET HTTP/2 auc-onenote.officeapps.live.com/afhs/CloudPolicySettings.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (371), with no line terminators
Hash a5e7e42d75f730e9fbd1145481e82154
a654df4f65781e8debf969023970ced28caca61a
c5507dcf8f0c3081c7adc25a0748dd69659d40def4ef3761a448dc8b01b6b1d0
GET /afhs/CloudPolicySettings.ashx HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
x-UserDataSignature: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik84MTBxbUpnWGE4TGhIbHVISmNxMlJSYlprYyJ9.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.8wC5SFpYRTd4BEYaIJMJDaqI1dVPYzuvDo3mc3SoITSCr2O1CGCtSuNbUC6fILQNNQMNxCw3wrFZYa0dci8bBmzAxbTGXAhDFzeJ6N4iZfTysNICRNLxECbtLR6pdRCGE3ZT0XDf-Vmi1C3DVRckuSDpggjd4zm85Ubcv_RF-Ue8aN7YjiyyzVKbQuvP_K09h0CKzFC8HvfbWsPGZsO-3GJEez2jOSUPwvRSkEKbLpd7UO0QuYU92yH2kYpsY8-mxNvylxzzsYOzZg4Hz0LQIGGkiJr6Y2SizyUAB0tkHcIv1Air-zn9F95o_D_Nx8p-l1fMw3mUN1Vw-jkfXogUeQ
x-LicensingIsEnabled: true
x-CacheIsEnabled: false
x-OcpsIsEnabled: true
x-LicensingAADIdIsEnabled: false
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 218
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27;Path=/;Domain=auc-onenote.officeapps.live.com; samesite=none; secure
x-correlationid: f3a56588-2c78-4e7d-95b3-248fdc06d3e5
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
x-officefe: SY3PEPF00001808
x-officeversion: 16.0.16501.41002
x-officecluster: GAU1
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
checkin-interval: 1440
x-officefd: SY3PEPF000052FD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C2EB01F06AD646C4ABC0E9502793AEB0 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:07Z
date: Tue, 09 May 2023 03:15:08 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js
200 OK 2.2 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (11522), with no line terminators
Hash 66d9f61d5da4b54f10c3b7a90382e04f
e04c13019ea896dc73d493a5a11a4e2ba945015f
48a36b347a58f7fb511ab157dbd2ad10a8ef94f1a9a858b43b811befa89250ef
GET /officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2197
last-modified: Thu, 13 Apr 2023 05:24:04 GMT
x-ms-request-id: 4c83bb78-f01e-0045-4646-732a74000000
content-encoding: br
date: Tue, 09 May 2023 03:15:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602109.5a2ee19"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js
200 OK 48 kB URL GET HTTP/2 js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectjs.monitor.azure.com
Fingerprint34:24:AA:BB:93:7E:D8:58:CA:9C:33:CA:3F:9A:0F:67:EA:D1:19:02
ValidityThu, 23 Mar 2023 11:01:37 GMT - Sun, 17 Mar 2024 11:01:37 GMT
File type ASCII text, with very long lines (65395)
Hash 465cf01fde453a49a6ea092c656002fb
6cd54cafc5e68a810ba7d3189a0123b9c61d4cc6
7d145b10d4a03fc22a08b2228f403779414c838430ce718ba52fb23e15837e55
GET /scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js HTTP/1.1
Host: js.monitor.azure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable, no-transform
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: RlzwH95FOkmm6gksZWAC+w==
last-modified: Thu, 18 Aug 2022 21:40:45 GMT
etag: 0x8DA81624EF9033C
x-cache: TCP_HIT
x-ms-request-id: 876920d1-301e-0081-6556-79e4dc000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 3.2.6
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0UyxLZAAAAACVgJVvGWrHSb+EqAkVv9ZIQU1TMDRFREdFMTgwNgBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
x-azure-ref: 0vbpZZAAAAABiHBUQvCuVSpDn17sfXpktU1ZHMjBFREdFMDYxOQBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
date: Tue, 09 May 2023 03:15:08 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/o/s/161641241013_resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1475
content-type: text/css
last-modified: Thu, 13 Apr 2023 05:23:17 GMT
x-ms-request-id: 69d415a3-501e-0063-7546-73626c000000
content-encoding: br
date: Tue, 09 May 2023 03:15:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602109.5a2ee47"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moe_status_icons.png
200 OK 6.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced\012- data
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/o/s/161641241013_resources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6140
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:24:15 GMT
x-ms-request-id: 19361b3f-101e-0010-4ce5-6d3aff000000
date: Tue, 09 May 2023 03:15:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602109.5a2ee49"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png
200 OK 1.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1115
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:23:22 GMT
x-ms-request-id: 19f1f489-401e-0040-64e5-6df8af000000
date: Tue, 09 May 2023 03:15:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602109.5a2ee4a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
403 Forbidden 1.2 kB URL GET HTTP/2 auc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4dc19838-da3c-44e7-bbe6-1c8a7c3b8a36
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-officefd: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 94CB19CCCE0E4D68A30873D96ABC084E Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:09Z
date: Tue, 09 May 2023 03:15:08 GMT
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 57913
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 827c5616-adb8-485b-8c84-4dc3c2027b5d
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6D
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F42F650C3CB24DF493D70C98B124D834 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:09Z
date: Tue, 09 May 2023 03:15:08 GMT
content-length: 0
X-Firefox-Spdy: h2
www.onenote.com/officeaddins/learningtools/?et=
200 OK 823 B URL GET HTTP/2 www.onenote.com/officeaddins/learningtools/?et=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectreverseproxy.onenote.com
FingerprintAE:C8:09:CD:CC:17:F9:9D:F1:58:18:21:8A:F4:A1:59:68:E2:51:BB
ValidityFri, 14 Apr 2023 05:54:53 GMT - Mon, 08 Apr 2024 05:54:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 33481e563e3202d4b69656897b53f1f0
81d731007ba2917f758bc4c921ac1cf544509ac4
56cfdd503d4d84086831771063c569dddda6c946539305076830f1529db8f62f
GET /officeaddins/learningtools/?et= HTTP/1.1
Host: www.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
x-routingofficecluster: neu-000.reverseproxy.onenote.com
x-routingofficefe: ReverseProxyFrontEnd_IN_1
x-routingofficeversion: 16.0.16501.40450
x-routingsessionid: 2e94d18b-2619-484e-9499-aac30540aacc
x-routingcorrelationid: be067718-a110-42c4-8207-083675684d4b
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR", CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx"
x-correlationid: be067718-a110-42c4-8207-083675684d4b
x-usersessionid: 2e94d18b-2619-484e-9499-aac30540aacc
x-officefe: AgavesFrontEnd_IN_1
x-officeversion: 16.0.16501.40455
x-officecluster: weu-000.appsforoffice.onenote.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
date: Tue, 09 May 2023 03:15:09 GMT
content-length: 823
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA
X-AccessTokenTtl: 1683638100359
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 10307
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b4ed00eb-4c76-49a3-ae31-058b6157f0aa
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF000017F9
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF000017F9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control
x-msedge-ref: Ref A: 90BA260B12EB4A70BDF39C43CFEC6019 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:09Z
date: Tue, 09 May 2023 03:15:08 GMT
content-length: 0
X-Firefox-Spdy: h2
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
200 OK 40 kB URL GET HTTP/2 ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint3E:29:69:36:18:B3:CE:3E:49:31:66:54:82:A6:FA:E9:FE:28:5A:FD
ValidityMon, 11 Jul 2022 00:00:00 GMT - Tue, 11 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 12108007906290015100837a6a61e9f4
1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3
c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4
GET /ajax/jQuery/jquery-3.5.0.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 22470097
cache-control: public,max-age=31536000
content-type: application/javascript
date: Tue, 09 May 2023 03:15:09 GMT
etag: "c844f287112d61:0"
last-modified: Tue, 14 Apr 2020 15:26:14 GMT
server: ECAcc (ska/F6BF)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 39744
X-Firefox-Spdy: h2
cdn.onenote.net/officeaddins/161650140455_Scripts/CommonDiagnostics.js
200 OK 12 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/CommonDiagnostics.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (41116)
Hash 08fbff79b5eec28ddff4d772223b81a9
aaabd7e0b32698e8295139c4868e9aee5edbd112
773a678845579e6334f19d4e62f29446e7898bd816359c74574e37884503f909
GET /officeaddins/161650140455_Scripts/CommonDiagnostics.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 81ebae43-86c6-49e3-a5d9-31ab2400541c
X-RoutingCorrelationId: 8001d9e2-73d6-4e54-bec6-5b9a57f69dac
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 8001d9e2-73d6-4e54-bec6-5b9a57f69dac
x-usersessionid: 81ebae43-86c6-49e3-a5d9-31ab2400541c
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 12330
Cache-Control: public, max-age=30941659
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/Instrumentation.js
200 OK 1.1 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/Instrumentation.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (3527), with no line terminators
Hash df2e618f66e5de074a8070bc09ca3c4f
38f67c978761e4aeaa5341a4ff39c59c1ded221c
bd0dd2b15855be52cba496cc6e8f0ff65fbba6addba92282e53ceca6b27bfcc9
GET /officeaddins/161650140455_Scripts/Instrumentation.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_0
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 911d1735-df0d-4bbc-93fc-311ada8ad09c
X-RoutingCorrelationId: e987d513-aebc-43f3-8762-f3e59128f5b0
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e987d513-aebc-43f3-8762-f3e59128f5b0
x-usersessionid: 911d1735-df0d-4bbc-93fc-311ada8ad09c
x-officefe: AgavesFrontEnd_IN_0
x-officeversion: 16.0.16501.40455
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 1077
Cache-Control: public, max-age=30941541
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/BrowserUls.js
200 OK 739 B URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/BrowserUls.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (1922), with no line terminators
Hash 3e3cd75b07b521bc61c01450e2c7873a
57d7881e0e878cabe74b1021cf86126148928de7
2882bf4b22d0ad63e6f8877eb5c22353921e8c87b197911462933b7d1a7a44b8
GET /officeaddins/161650140455_Scripts/BrowserUls.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 084eef23-2c60-48b4-b6ab-793711e9b90b
X-RoutingCorrelationId: ea1a0781-d688-4229-8dde-cf7d66634616
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ea1a0781-d688-4229-8dde-cf7d66634616
x-usersessionid: 084eef23-2c60-48b4-b6ab-793711e9b90b
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 739
Cache-Control: public, max-age=30941587
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/pickadate.min.js
200 OK 7.1 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/pickadate.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (20116), with no line terminators
Hash edf023b23dc08c7c90ba27a3bde7480b
0f03edbe6bda20c20251eff9db86359eb5155f66
7337ed6220111758e61f3be5060ae9a807d83edf05d5f7cc92b0b85e34a5fef3
GET /officeaddins/161650140455_Scripts/pickadate.min.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_9
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: fff48d82-831f-4bf1-a7b4-c3eba422a533
X-RoutingCorrelationId: ca95026f-e819-4642-ac04-a815446c66a0
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ca95026f-e819-4642-ac04-a815446c66a0
x-usersessionid: fff48d82-831f-4bf1-a7b4-c3eba422a533
x-officefe: AgavesFrontEnd_IN_9
x-officeversion: 16.0.16425.40461
x-officecluster: weu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 7064
Cache-Control: public, max-age=30941654
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js
200 OK 14 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (32011), with CRLF line terminators
Hash 5a8ed3646a340a247cd48f5732baea69
8a961a2c1461eb5cd8a9009911970824602f8b79
c459ec1608d98a847ab4c83723e1c4b2dc6e58a7006d5566c529a93113c2ee62
GET /officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_4
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: ee3f7d22-9869-4da1-a304-f620c9637b4a
X-RoutingCorrelationId: 57fd51f9-4fb4-4eab-9022-1f32daeb96df
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 57fd51f9-4fb4-4eab-9022-1f32daeb96df
x-usersessionid: ee3f7d22-9869-4da1-a304-f620c9637b4a
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 13498
Cache-Control: public, max-age=30941633
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js
200 OK 1.5 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with CRLF line terminators
Hash 72d9a825554620c51bf0018a457e7f2e
23400e26c69a1f8a47236ffad4bc80fc80ba773e
365009220d893f07b356c7f253cecd5a9f7e06d6207a3dd7a148fc73812b4fe6
GET /officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_5
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: ba96ee5b-61e2-40d9-b74b-9958ee04089e
X-RoutingCorrelationId: 81126582-e001-491d-a3a8-66b919b3257a
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 81126582-e001-491d-a3a8-66b919b3257a
x-usersessionid: ba96ee5b-61e2-40d9-b74b-9958ee04089e
x-officefe: AgavesFrontEnd_IN_16
x-officeversion: 16.0.16425.40461
x-officecluster: weu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 1459
Cache-Control: public, max-age=30941573
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/LearningTools/LearningTools.js
200 OK 6.6 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/LearningTools/LearningTools.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (20082), with no line terminators
Hash 58a30e58fbe0165292f0425b04256e46
420050fe7e6034d52094b2f769fdb12a3591a748
534ecf698946529ff99c868da810dab8e1e9c7491ebdc873bdf95d34abf75c4e
GET /officeaddins/161650140455_Scripts/LearningTools/LearningTools.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: df938de8-a58b-4bb6-a186-37a8e93e0f6e
X-RoutingCorrelationId: db102769-28e3-440e-9110-c3c5d0e0b6e1
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: db102769-28e3-440e-9110-c3c5d0e0b6e1
x-usersessionid: df938de8-a58b-4bb6-a186-37a8e93e0f6e
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 6645
Cache-Control: public, max-age=30941595
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
appsforoffice.microsoft.com/lib/1.1/hosted/office.js
200 OK 17 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/office.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (32958), with CRLF line terminators
Hash 0d3408e5b6e10c3e45a430580401b5b3
13e5f74b60578cdfa242a896d4d5c2627ef50235
8b10b0fe6a283ea3035b7b03b09bfda03c7d2143c6788d71551382f4f0c30a7b
GET /lib/1.1/hosted/office.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 17111
Cache-Control: public, max-age=9266
Date: Tue, 09 May 2023 03:15:09 GMT
Connection: keep-alive
appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
200 OK 127 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (64824), with CRLF line terminators
Size 127 kB (127161 bytes)
Hash d3cc654ce11e484760880b22c9b2d4d4
2b372c93eef829ffe44f1f1bb7579b1ffa073ca9
34176555d7cd7dc4f426647776c81aab59d6e471fcbe352f805f97ab9923554f
GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 127161
Cache-Control: public, max-age=9560
Date: Tue, 09 May 2023 03:15:10 GMT
Connection: keep-alive
appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
200 OK 5.7 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (20946), with CRLF line terminators
Hash 92a3ddf4c14af9eb4db2939a2b2712ac
81b322775a3e9e9335fb780179b6b922759ce6ff
5b6d3f98f8a755878f226b38fdb1f7c31e67b456221f253b70f95aa331668594
GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 5650
Cache-Control: public, max-age=5345
Date: Tue, 09 May 2023 03:15:10 GMT
Connection: keep-alive
appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
200 OK 19 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 65f960810895837b06b1d3ae1cceaef3
0673f80a70cfb78ad7018e161e3201e80cb71307
f452e6287dafd3b632cbff8533ed5dfc2f6f476c8672b468cf6dcfe321b8c889
GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 19004
Cache-Control: public, max-age=4617
Date: Tue, 09 May 2023 03:15:10 GMT
Connection: keep-alive
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a33ab50bcc3a87bb64afdd6011f46ed8
1f320b0879bf3de96690b6198716f1a641895d77
4d759e2181902905e5ff0b704fba4d6baba35fa16221f612c3416d2d54a38b9a
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
upload-time: 1683602109857
time-delta-to-apply-millis: 1550
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 8675
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Cookie: MC1=GUID=22f3a7b68e524a5dbd245b1e2ee87b62&HASH=22f3&LV=202305&V=4&LU=1683602107775; MS0=9d434630721349899e4c09f4e1a33a3b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 450
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:09 GMT
www.onenote.com/officeaddins/RemoteUls.ashx
200 OK 0 B URL POST HTTP/2 www.onenote.com/officeaddins/RemoteUls.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectreverseproxy.onenote.com
FingerprintAE:C8:09:CD:CC:17:F9:9D:F1:58:18:21:8A:F4:A1:59:68:E2:51:BB
ValidityFri, 14 Apr 2023 05:54:53 GMT - Mon, 08 Apr 2024 05:54:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /officeaddins/RemoteUls.ashx HTTP/1.1
Host: www.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-UserSessionId: 2e94d18b-2619-484e-9499-aac30540aacc
Content-Length: 513
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/officeaddins/learningtools/?et=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
x-routingofficecluster: neu-000.reverseproxy.onenote.com
x-routingofficefe: ReverseProxyFrontEnd_IN_1
x-routingofficeversion: 16.0.16501.40450
x-routingsessionid: 2e94d18b-2619-484e-9499-aac30540aacc
x-routingcorrelationid: 4a295e88-35e8-4baf-80e5-26916541681b
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4a295e88-35e8-4baf-80e5-26916541681b
x-usersessionid: 2e94d18b-2619-484e-9499-aac30540aacc
x-officefe: AgavesFrontEnd_IN_1
x-officeversion: 16.0.16501.40455
x-officecluster: weu-000.appsforoffice.onenote.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-buls-suppressionetag: N/A
x-buls-suppressedtags:
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
date: Tue, 09 May 2023 03:15:09 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ccfdfc188c1345a939a457764cdc431
b9c29255e87524cc2267bce10e8c5859327be4d4
8804d2766bdbe34b6d37ee6494630bdffa6263d7ecd7433a869f6110404e2c22
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439
upload-time: 1683602110845
time-delta-to-apply-millis: 1550
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 17912
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Cookie: MC1=GUID=22f3a7b68e524a5dbd245b1e2ee87b62&HASH=22f3&LV=202305&V=4&LU=1683602107775; MS0=9d434630721349899e4c09f4e1a33a3b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 494
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:10 GMT
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:1C:80:C1:AA:37:77:D8:FC:EC:2A:BD:73:2B:6C:84:D4:D0:72:27
ValidityWed, 08 Mar 2023 09:02:43 GMT - Sat, 02 Mar 2024 09:02:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 6854
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 291
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Tue, 09 May 2023 03:15:18 GMT
Connection: close
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
9 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint03:4A:87:DB:65:E8:DA:10:7B:E0:F3:A5:1B:88:D9:20:78:FE:07:21
ValidityWed, 08 Mar 2023 14:06:31 GMT - Sat, 02 Mar 2024 14:06:31 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9da9464f277cec1e86b565e258e17d42
bc933e8672c85b931f16e136994648b5232aa94d
dada35c879e296846b7745644f559d8182cf0e09eaf1c19d5dc0ce423d0ecff4
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4913
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Cookie: MC1=GUID=22f3a7b68e524a5dbd245b1e2ee87b62&HASH=22f3&LV=202305&V=4&LU=1683602107775; MS0=9d434630721349899e4c09f4e1a33a3b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 329
Access-Control-Allow-Headers: Connection,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://auc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Tue, 09 May 2023 03:15:19 GMT
Connection: close
auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GAU1&usid=750635ea-d3e2-4e30-9bdc-808a58c60320 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-BrowserUlsBeacon: [{"Index":8,"MsSinceStart":16512,"Value":"SessionExited","Type":"SessionBoundary"}]
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 21ca96bc-0b46-452d-9bcb-bd31514e3e9a
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 251377C9DF68441B9C6C8F966C7FAAFF Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:19Z
date: Tue, 09 May 2023 03:15:18 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 16769
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 84643de6-bec2-44c2-a165-1ce18deb9b9e
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A73
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
access-control-allow-origin: https://auc-onenote.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A73
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: A41A5E4186AE48F1ADAB08A561A071FC Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:19Z
date: Tue, 09 May 2023 03:15:18 GMT
content-length: 0
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/OneNote.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013&waccluster=GAU1&WacUserType=WOPI&ckey=AgKHpdKJYCy0hTjaGw0Xcs0XNUq%2Fv8WsmsX5gRfzqRo%3D%2C638191989021412662&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA&access_token_ttl=1683638101488&haep=1
113 B URL auc-onenote.officeapps.live.com/o/OneNote.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013&waccluster=GAU1&WacUserType=WOPI&ckey=AgKHpdKJYCy0hTjaGw0Xcs0XNUq%2Fv8WsmsX5gRfzqRo%3D%2C638191989021412662&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA&access_token_ttl=1683638101488&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bab5e1c7bd537651b064e9eb401a7ffc
2b86efd5708ef6c29790173ca682d0bbb92cca25
37ee3a7224108a7c22ce751b1466e3faafaa54e2f124d95c8ae491ad1375842a
POST /o/OneNote.ashx?usid=750635ea-d3e2-4e30-9bdc-808a58c60320&build=16.0.16412.41013&waccluster=GAU1&WacUserType=WOPI&ckey=AgKHpdKJYCy0hTjaGw0Xcs0XNUq%2Fv8WsmsX5gRfzqRo%3D%2C638191989021412662&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.SFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85_F_XdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z-NKBbw_x914_kBIGt4rdq6qvD_OH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka-vcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX_K347mCqlQksySA&access_token_ttl=1683638101488&haep=1 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 1832
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GAU1-ARRAffinity=0f6fd1709ea5d065019b2e302df2ad6d7e36a6deabf98704475896d570bb3e27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 113
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ef25888b-4ab2-4817-854a-bcaac685b0f8
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6F
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6F
x-wacfrontend: SY3PEPF00001A6F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D17FE419FBB74382A15FD151051CDF94 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:19Z
date: Tue, 09 May 2023 03:15:18 GMT
X-Firefox-Spdy: h2
auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
200 OK 178 kB URL POST HTTP/2 auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://morrisconsultingnz-my.sharepoint.com/personal/john_morris_morrisconsulting_co_nz/_layouts/15/Doc.aspx?sourcedoc=%7B6c880836-56cb-49f5-b477-fb00ca00f50e%7D&action=default&slrid=e20ab1a0-6062-2000-45ea-81452b9e73da&originalPath=aHR0cHM6Ly9tb3JyaXNjb25zdWx0aW5nbnotbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvam9obl9tb3JyaXNfbW9ycmlzY29uc3VsdGluZ19jb19uei9FallJaUd6TFZ2Vkp0SGY3QU1vQTlRNEJzTnk1V1ptODJ5WnNqMmlfZUdGTU1nP3J0aW1lPTdRN0tranRRMjBn&cid=41e0da61-7ce5-4bdc-80e5-8b10246eef10
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Size 178 kB (178376 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 5432
Origin: https://morrisconsultingnz-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://morrisconsultingnz-my.sharepoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 750635ea-d3e2-4e30-9bdc-808a58c60320
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: AtAgCmjF9NSDe7WG5+zXddNhpryHIhWvHG5BxTAcMRn1V9oswBhX2RSXHeDxLcwXMB/NYHr3BAXOBJJY1ita2BAAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzAzOTgwODAwfQ==
origin-agent-cluster: ?1
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
content-security-policy-report-only: font-src data: 'self' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; media-src *.skype.com *.skypeassets.com 'self' *; object-src 'self' *; child-src blob: * onenote:; worker-src blob: *; img-src * data: blob:; report-uri /o/reportcsp.ashx
document-policy: js-profiling
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=GAU1&FileSource=SharePointOnline"}]}
server-timing: prerender;dur=46,render;dur=0,total;dur=46
x-officefd: SY3PEPF00001A6A
x-wacfrontend: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: B1B46ED445464929A6387F4E072E2D3A Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:01Z
date: Tue, 09 May 2023 03:15:01 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml
200 OK 90 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml
IP
ASN #20940 Akamai International B.V.
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/xml
last-modified: Thu, 13 Apr 2023 05:24:11 GMT
x-ms-request-id: a5b18275-501e-0063-53e4-6d626c000000
content-encoding: gzip
content-length: 14502
date: Tue, 09 May 2023 03:15:09 GMT
vary: Accept-Encoding
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1683602109.5a2ee25"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359
101 Switching Protocols 0 B URL GET HTTP/1.1 onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectonenoteonlinesync.onenote.com
FingerprintC6:49:ED:E3:FF:8F:D1:8F:44:97:AD:2B:00:E5:99:F9:49:AB:03:0F
ValidityMon, 30 Jan 2023 02:26:30 GMT - Thu, 25 Jan 2024 02:26:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onenoteonlinesync/v2/sync?sessionId=750635ea-d3e2-4e30-9bdc-808a58c60320&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fmorrisconsultingnz%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Fjohn%255Fmorris%255Fmorrisconsulting%255Fco%255Fnz%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F6c88083656cb49f5b477fb00ca00f50e%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%255FF%255FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%252DNKBbw%255Fx914%255FkBIGt4rdq6qvD%255FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%252Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%255FK347mCqlQksySA%26access_token_ttl%3D1683638100359 HTTP/1.1
Host: onenoteonlinesync.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://auc-onenote.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qzIp+sayqpzVTuMXEVy3Ng==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-CorrelationId: c8da37be-10a3-486e-83ed-70e5605756ad
X-UserSessionId: c8da37be-10a3-486e-83ed-70e5605756ad
X-OfficeFE: OneNoteOnlineSyncServiceEngine_IN_16
X-OfficeVersion: 16.0.16501.40455
X-OfficeCluster: weu-002.onenoteonlinesync.onenote.com
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-AspNet-Version: 4.0.30319
Sec-WebSocket-Accept: QUOy8Gussu/SspphjmG9HJyUbZ4=
Connection: Upgrade
X-Powered-By: ASP.NET
Date: Tue, 09 May 2023 03:15:02 GMT
auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
200 OK 189 B URL POST HTTP/2 auc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%2EeyJhdWQiOiJ3b3BpL21vcnJpc2NvbnN1bHRpbmduei1teS5zaGFyZXBvaW50LmNvbUA1M2ViNzZkMC01NTFhLTQ4M2EtYWYwMC1kOGNmNzcwMTc2NDIiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzYwMjEwMCIsImV4cCI6IjE2ODM2MzgxMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMyNjkxNDZjYWMzZGU0YTg4MDY2MjgwOTZlYTkxZDk4NDA0ZDQxZmZjYzg2Y2JiMTIyYjYyYTc2ZjkzYzU0NzJkIiwic2hhcmluZ2lkIjoiWWd0U0NjVlhURTZRSW1DQjVBaEUvUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNmM4ODA4MzY1NmNiNDlmNWI0NzdmYjAwY2EwMGY1MGU7ZHlNbjNqQWxTN0VTQTVlSkZncU02QW14OHRJPTtEZWZhdWx0O2Y0ZTkwZWFhMzAzYzRlYzA4YzcyNmRhZGYzYzVlNGVjOztUcnVlOzs7MTA0ODU3NjtlMjBhYjFhMC1hMDgwLTIwMDAtNDVlYS04ZmI1NjQwOTIxMGYiLCJmaWQiOiIxOTU0OTIifQ%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 66d5e7897a50a43409a3e25015d713c5
8eae0af996352073a499b1109b3d44ee2ec20469
95293d1df0a07477b181b743caa45c794ac1f9bad1f465e724c85a3ce5646627
POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fmorrisconsultingnz%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjohn%5Fmorris%5Fmorrisconsulting%5Fco%5Fnz%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2ESFBdtic2DtphrAZjl3MLAiEgWLhmPrrhZehVm3Y3EGgnTwB5lrB04r85%5FF%5FXdMmXjaDCObU3vD8JQwAqfsHIq6uOcn6Z%2DNKBbw%5Fx914%5FkBIGt4rdq6qvD%5FOH5A9QW57wLdhLfq49gxSfZfMhRFLPP2v8deA0jWgB2xADIGn7t8ADR3TkC1ka%2Dvcrj3NzBuaKkShCzv7N4qvrTmbt5bp9fh6MoUXinTozk27BJKo8M64TXvhBbFEV7xLWjSuSr4LG1P7o2QgbXFB7FNfTJ6l3QgS1iNQiarIzQf1du1utZBuWI2GtpsQillcXIvJn9QcjS47wXOX%5FK347mCqlQksySA&access_token_ttl=1683638100359 HTTP/1.1
Host: auc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 750635ea-d3e2-4e30-9bdc-808a58c60320
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GAU1
X-WacFrontEnd: SY3PEPF00001A6A
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: false
X-UserType: WOPI
haep: 1
X-Key: AgKHpdKJYCy0hTjaGw0Xcs0XNUq/v8WsmsX5gRfzqRo=,638191989021412662
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: GAU3-ARRAffinity=bb5e34fca76ff3ecd4ba149c9f1fcad89f9c3197ff22e3c288934ba16ca0cfaf; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1027e50c-4b81-4aed-abe2-1eeab9051e41
x-usersessionid: 750635ea-d3e2-4e30-9bdc-808a58c60320
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: SY3PEPF00001A6A
x-officeversion: 16.0.16412.41013
x-officecluster: GAU1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: SY3PEPF00001A6A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 114EB47306524333B200252B8BADDD80 Ref B: SVG20EDGE0414 Ref C: 2023-05-09T03:15:03Z
date: Tue, 09 May 2023 03:15:03 GMT
X-Firefox-Spdy: h2
amcdn.msftauth.net/me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell
200 OK 29 kB URL GET HTTP/2 amcdn.msftauth.net/me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=en%2DUS&wopisrc=https%3A%2F%2Fmorrisconsultingnz-my.sharepoint.com%2Fpersonal%2Fjohn_morris_morrisconsulting_co_nz%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F6c88083656cb49f5b477fb00ca00f50e&wdenableroaming=1&mscc=0&wdodb=1&hid=E20AB1A0-A080-2000-45EA-8FB56409210F&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683602098442&jsapi=1&jsapiver=v1&newsession=1&corrid=750635ea-d3e2-4e30-9bdc-808a58c60320&usid=750635ea-d3e2-4e30-9bdc-808a58c60320&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint39:26:0C:C1:15:7C:CD:FB:A0:02:79:61:AE:03:2C:85:65:25:BC:7E
ValidityFri, 31 Mar 2023 06:02:02 GMT - Mon, 25 Mar 2024 06:02:02 GMT
File type ASCII text, with very long lines (29173)
Hash 20c8f585b946f97d60272a119f94dba6
26e35a5b734cf79ec259b4c63d746eeb255d5957
98759c9c01fa5690ebdc959b0141f1963b2e5d2edf7bb2b94b55ed842d2ecd41
GET /me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell HTTP/1.1
Host: amcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://auc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, no-transform, max-age=7200
content-type: application/javascript
content-encoding: br
expires: Tue, 09 May 2023 05:15:08 GMT
x-cache: CONFIG_NOCACHE
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref-originshield: 0vLpZZAAAAABE+A8FBsEnSpzJEGQyXjVHQU1TMDRFREdFMTgxNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
x-azure-ref: 0vLpZZAAAAADVzyYNqEb3TbqI5KltriZ8U1ZHMjBFREdFMDUxOQA5ZmU2YzNmMS0xNzE4LTRhOTMtOTI1NS02M2NkM2Y4Y2E1YWI=
date: Tue, 09 May 2023 03:15:08 GMT
X-Firefox-Spdy: h2
13.107.138.8
23.13.245.138
95.101.10.208
52.109.89.73
40.90.128.17
0.0.0.0