r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4141
Expires: Thu, 01 Dec 2022 08:44:11 GMT
Date: Thu, 01 Dec 2022 07:35:10 GMT
Connection: keep-alive
1drv.ms/u/s!Am3ZXobPtPLBaLWZYoSaz6lCtLg?e=PZWuru
301 Moved Permanently 0 B URL HTTP/2 1drv.ms/u/s!Am3ZXobPtPLBaLWZYoSaz6lCtLg?e=PZWuru
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/s!Am3ZXobPtPLBaLWZYoSaz6lCtLg?e=PZWuru HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?resid=C1F2B4CF865ED96D!104&authkey=!ALWZYoSaz6lCtLg&e=PZWuru
x-msnserver: DB3PPF0D2EFA6C7
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: 2Pbo+lW7M0ixaDtWaEw67A.0
x-asmversion: UNKNOWN; 19.1047.1109.2003
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F9366BF8E86E4073A7E695FD2CA3BFFA Ref B: OSL30EDGE0105 Ref C: 2022-12-01T07:35:10Z
date: Thu, 01 Dec 2022 07:35:10 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5650
Cache-Control: max-age=102619
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 07:35:10 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 12:05:29 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 07:19:45 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 925
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Thu, 01 Dec 2022 08:18:51 GMT
Date: Thu, 01 Dec 2022 07:35:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Un1fW43r/M204P7aXn6pc5iKPohAehMWypp0hrHdSvUTS9fKJCvNO6DDXDh8Rzvb8APPiZ39ThI=
x-amz-request-id: XBCDG8VXQ9XF9BCS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 06:45:33 GMT
age: 2977
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 07:35:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 07:08:56 GMT
cache-control: public,max-age=3600
age: 1574
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5639
Cache-Control: max-age=97540
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 07:35:10 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 10:40:50 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZREBMC9uTy9twifF4EqZVw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GKf+YGMASRzwUQx/lNolCVM5+vY=
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//maincss-3d633429.css
200 OK 26 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//maincss-3d633429.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3d2c8f6504459b2e5830f6a4814202be
9957042a71e5df21409b99c98ccc788e073b0578
86a538f01e19aec395d5caa64ebad64e2343c782b56f90a49811f680de5e2d7a
GET /files/onedrive-website-release-prod_master_20220804.001//maincss-3d633429.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 25623
content-type: text/css
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:50 GMT
x-ms-request-id: aebd203d-501e-0023-2467-ae5002000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:12 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filescss1-11eb1969.css
200 OK 16 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filescss1-11eb1969.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash ace3403c9fc64cf6db37ced3a75fc639
73812cc859c8a4e5208bf3b89e5c4190be2d486f
cdac259829b35ff70f7148f9575fe2fbadef119972988becb5be1ddb1f2f98b6
GET /files/onedrive-website-release-prod_master_20220804.001//filescss1-11eb1969.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 15784
content-type: text/css
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: 429477d6-601e-0057-72c1-bd51a4000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:12 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8416
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 07:35:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8416
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 07:35:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8416
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 07:35:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8416
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 07:35:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8416
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 07:35:12 GMT
Connection: keep-alive
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filescss2-7859787f.css
200 OK 31 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filescss2-7859787f.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5f77f27c0f0e909a57d3923881633788
1f762819bac13417e55e51fc999a8fe1235c3878
74750cf479258424a2bf8c670cf5ab1542c417a75613edda32a7c7ba67ef9997
GET /files/onedrive-website-release-prod_master_20220804.001//filescss2-7859787f.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 30612
content-type: text/css
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: a5ce0a3f-f01e-0058-2e67-ae129e000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:12 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 42c762f71487f8e0285dd2129700f069
ec0fd74a981603e197df26c6fb79ef039f737557
8a40883d87b1e2c6e116e3cf881a8b39c987200a8556b651f78a376b3ddbaa26
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8124
x-amzn-requestid: e000c0d5-82d0-41a8-8def-b36970226969
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0UqEd1oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdb7-27efd8c92b8f6e4f257cec3b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1GIxjB2nXfoxuqJHLtkXl4OJT_Po5DJA_w26E2K8WOmm_PZw1qU3IQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 22:19:35 GMT
etag: "ec0fd74a981603e197df26c6fb79ef039f737557"
content-type: image/jpeg
age: 33337
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 328ce221bcf3442f88d09373193ff594
63bfa2ea925aa2c188c664a7bf7af7b0e5417e60
21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13411
x-amzn-requestid: 71f8798f-93e9-4649-8822-7ad3fadeec34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz6vH05oAMF_qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd11-1849aa08463e5c1f3d9b15b9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVGFEOePBybOeNxG6eWBffm8Ha_fmBnT8vMIGcI8zv9C7yiBeSncDw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60"
content-type: image/jpeg
age: 34992
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1039182464db1365a476dd88029b97d8
06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac
2e081da1464a18d755a841558f63303634a9e22df888c9c43246565abfc3d48d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12655
x-amzn-requestid: db51cc10-5e13-4d63-a15b-a1c62b159f7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzNfFvloAMFgqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbef-67ec32d74521865c7f800ac6;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mctLVf0ho2G4skGRA0gpSH5HVoAUeH7YOyY1QA4_abODLKqRIX0eTg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 22:09:11 GMT
etag: "06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac"
content-type: image/jpeg
age: 33961
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 18:58:06 GMT
age: 45426
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb4b8985f697c1ff7753d3961fb4f67d
b412d62d44993500b947a38e8e242d0c6d6b7588
571c1543cd99b08e62438146f383bf48a9172ae377b4c17dbc6c8c58bdbb5803
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5295
x-amzn-requestid: e9c096df-2dba-408c-b45a-d114755fa883
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzM0HmuoAMF4Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbeb-5808a0756f4180a0613cdbcd;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUjE1-vViTaS5s23OSlhLlxC597y0etgzMYGUdlqdpHBTK_ww5DEYA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 22:17:18 GMT
age: 33474
etag: "b412d62d44993500b947a38e8e242d0c6d6b7588"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 9e243a73-18ff-4abf-9b9c-442719960125
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpppFXjoAMFehg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bca3-47620f39181264772d2fb52d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:13:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _v5hatZyEWVRB4Tebygbb-QfE02oaFxE8CRfQsUY7I_ektxE3YeIpw==
via: 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 17:08:01 GMT
age: 52031
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
p.sfx.ms/is/invis.gif
200 OK 43 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 74996e793f8888edd815ccfed177f5ee
376e57f850a242cf780f6904ef4b54f0587067df
cb725f174a86bcf23b5b9f53e5b60d53eaa1524f88f4dcec165670a3b0eb6c2c
GET /is/invis.gif HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: image/gif
last-modified: Sat, 22 Oct 2022 07:17:25 GMT
accept-ranges: bytes
etag: "ca6e355e6e5d81:0"
server: Microsoft-IIS/10.0
x-msnserver: RD0003FF23B8A3
x-odwebserver: westeurope1-odwebp
date: Thu, 01 Dec 2022 07:35:12 GMT
content-length: 43
X-Firefox-Spdy: h2
p.sfx.ms//storage/aria-2.5.0.min.js
200 OK 12 kB URL HTTP/2 p.sfx.ms//storage/aria-2.5.0.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (32013), with CRLF line terminators
Hash cc11d45b7b4c561d9ab2e012f15122f8
c487462545ef3d6aa286f892c4eeeef4224e31f7
5d66a53ba4c9cdf3555618892edb9a16736210faea448f8d7d924df85fa4a3ad
GET //storage/aria-2.5.0.min.js HTTP/1.1
Host: p.sfx.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript
content-encoding: gzip
last-modified: Sat, 22 Oct 2022 07:17:25 GMT
accept-ranges: bytes
etag: "80f0ab55e6e5d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-msnserver: RD0003FF23B8A3
x-odwebserver: westeurope1-odwebp
date: Thu, 01 Dec 2022 07:35:12 GMT
content-length: 12195
X-Firefox-Spdy: h2
ocsp.msocsp.com/
200 OK 1.7 kB IP
Hash 1b5fef50c78d46d9ce36c8257fa1342a
da38a92d5fc8829b0c2994fc83ac12bf1e410d8f
84a8706c207b74f9ec92fc089bd4d33fbb4793322cd8730d93e216e2af5d48d7
POST / HTTP/1.1
Host: ocsp.msocsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 07:35:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1742
Connection: keep-alive
Expires: Mon, 05 Dec 2022 04:00:01 GMT
ETag: "da38a92d5fc8829b0c2994fc83ac12bf1e410d8f"
Last-Modified: Thu, 01 Dec 2022 04:00:02 GMT
X-Cache: HIT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1830
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772a25128a02b509-OSL
ocsp.msocsp.com/
200 OK 1.7 kB IP
Hash 1b5fef50c78d46d9ce36c8257fa1342a
da38a92d5fc8829b0c2994fc83ac12bf1e410d8f
84a8706c207b74f9ec92fc089bd4d33fbb4793322cd8730d93e216e2af5d48d7
POST / HTTP/1.1
Host: ocsp.msocsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 07:35:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1742
Connection: keep-alive
Expires: Mon, 05 Dec 2022 04:00:01 GMT
ETag: "da38a92d5fc8829b0c2994fc83ac12bf1e410d8f"
Last-Modified: Thu, 01 Dec 2022 04:00:02 GMT
X-Cache: HIT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1830
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772a251288eab4f7-OSL
c1-onenote-15.cdn.office.net/o/s/hAD2018583500A23F_App_Scripts/onenote-boot.min.js
200 OK 34 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hAD2018583500A23F_App_Scripts/onenote-boot.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 551d669c66b119992131ea686356569a
fd3d9ceb97487cca9237923349a61fa9ddf560fa
19ad1659aa16c45c5377edadcd827edc52ae477ab7cd226a776cb406ed5f86e8
GET /o/s/hAD2018583500A23F_App_Scripts/onenote-boot.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 34225
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Thu, 01 Dec 2022 05:37:39 GMT
Accept-Ranges: bytes
ETag: W/"c748bc6475d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: e77c02a8-75a5-499f-83eb-b3ebdedae9cc
X-UserSessionId: e77c02a8-75a5-499f-83eb-b3ebdedae9cc
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B53
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B53
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 1C8B5818C2D14D18B1EA8C7C4A2A9BB6 Ref B: HEL01EDGE1319 Ref C: 2022-12-01T05:37:39Z
Cache-Control: public, max-age=1202524, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/resources/1033/FavIcon_OneNote.ico
200 OK 7.9 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/resources/1033/FavIcon_OneNote.ico
IP
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 7a7a4890caaa77025e1b33a6d6e474ee
dc735b99d9ef0c76b4a7aeae8baa4cbd9551ba77
9e1da5bf715135491519a188cad977db6cba414071e2407b69d63221379d8802
GET /o/resources/1033/FavIcon_OneNote.ico HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 7886
Content-Type: image/x-icon
Last-Modified: Wed, 14 Sep 2022 13:19:14 GMT
Accept-Ranges: bytes
ETag: "7c8a98953cc8d81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 46d317ac-ab1a-4b98-b731-6eea8cea0435
X-UserSessionId: 46d317ac-ab1a-4b98-b731-6eea8cea0435
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15707.41015
X-OfficeCluster: PNL1
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: D1700D1067124679B3C68D76A88E4371 Ref B: HEL01EDGE0719 Ref C: 2022-09-24T17:30:00Z
Cache-Control: public, max-age=239479, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 118
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 93648a01-f0ef-4bc3-86ee-7d7ba6c44946
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 34925119956D40CCB2CE2FCE0CCCB33C Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:13Z
date: Thu, 01 Dec 2022 07:35:12 GMT
content-length: 0
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1803
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 506cee31-f1d0-4e28-bfde-6119ae71c688
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-buls-suppressedtags: 378069,1671813,2209344,3249545,3290144,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159499,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 712AAF2C8FFD4D0BB0F6C0C096286765 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:13Z
date: Thu, 01 Dec 2022 07:35:12 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
200 OK 4.7 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
IP
File type ASCII text, with very long lines (27024), with CRLF line terminators
Hash e4179b99233a7d6c5ee50933d247e440
ccc5ec383b2811a1fa5e179beb6196724af80c14
56a3edc180e35415ad38dfc7f29b64e1d2afb12503f380779b51c87fd6fe5d32
GET /o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 4702
Content-Type: text/css
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:33 GMT
Accept-Ranges: bytes
ETag: "ffd948d8a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 043184a8-262a-48a4-abae-10a79a849100
X-UserSessionId: 043184a8-262a-48a4-abae-10a79a849100
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006957
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006957
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 33A11CF32CF14F3DB1AA8152A9F8EFA4 Ref B: HEL01EDGE1112 Ref C: 2022-11-23T12:44:14Z
Cache-Control: public, max-age=536945, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/hAEDBE0FA354BCBEA_resources/1033/OneNote.Refresh.css
200 OK 54 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hAEDBE0FA354BCBEA_resources/1033/OneNote.Refresh.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c5318c07b2fe83444dd078517ac45461
7c62493c311f7183e2efc18f0c5acf2c6bae679d
bf20f0976766b5159717387b222911eacd3391251cf99bda4c6551f5e6518dcc
GET /o/s/hAEDBE0FA354BCBEA_resources/1033/OneNote.Refresh.css HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 53716
Content-Type: text/css
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:00:15 GMT
Accept-Ranges: bytes
ETag: "cfa732d1a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 694e46b9-4410-4e89-85da-adc041f1311e
X-UserSessionId: 694e46b9-4410-4e89-85da-adc041f1311e
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 78AD823BFD9349AFA4CCD58126B4CDB7 Ref B: HEL01EDGE0905 Ref C: 2022-11-28T06:54:02Z
Cache-Control: public, max-age=947912, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/h4086D5B516D13B50_App_Scripts/wacBootNew.min.js
200 OK 16 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h4086D5B516D13B50_App_Scripts/wacBootNew.min.js
IP
File type ASCII text, with very long lines (52254)
Hash 3c0cb004552df7ae0f6f2a3633bbabeb
513a2f8641fba04f346346aef53e3af959d1ae72
2cfbf83003ff473fda6aad6aff46501447d5bb05920960f24a7af715dcbc52dc
GET /o/s/h4086D5B516D13B50_App_Scripts/wacBootNew.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 16241
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 12:01:01 GMT
Accept-Ranges: bytes
ETag: "31e99eca0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 60e92814-175c-432d-8e72-94311b929b63
X-UserSessionId: 60e92814-175c-432d-8e72-94311b929b63
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: A29702BD1FC44BAEB9C9E4A42FB165A4 Ref B: HEL01EDGE1215 Ref C: 2022-11-23T05:20:24Z
Cache-Control: public, max-age=510335, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1-onenote-15.cdn.office.net/o/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
200 OK 24 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash d82fdc1cf05a821d5c3b1744390cccd2
53752f2602fddbdc37f556835648bb9abe5b98f8
1eea775f3eae80538c76cfcab58da85c088fdb7884d6cbf9247470a92639bd4c
GET /o/s/hBCD659260529EA73_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 23700
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:38 GMT
Accept-Ranges: bytes
ETag: "a6b65bc99fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: e0184594-5741-4f36-8b86-f27ee1740e26
X-UserSessionId: e0184594-5741-4f36-8b86-f27ee1740e26
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006021
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006021
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: C1AD92E0A3674463B55F91F443998DA9 Ref B: HEL01EDGE1519 Ref C: 2022-11-30T13:02:23Z
Cache-Control: public, max-age=1142790, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
200 OK 6.6 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
IP
File type ASCII text, with very long lines (29971), with no line terminators
Hash 1293be41ba397a2e16a4dbbedf67085f
56236d2b41e9c54f57c511d1d512f3e2d093c2db
7c5b3bee65933481d4133df81a63d09af78ad4d0ae79c64c6f10ad5e1eb57162
GET /o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 6569
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 12:00:10 GMT
Accept-Ranges: bytes
ETag: "d6d97fcea0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b17afb6c-0177-4cd9-948a-442d4fd356c3
X-UserSessionId: b17afb6c-0177-4cd9-948a-442d4fd356c3
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006960
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006960
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: A53C0623DC7041B79B3E8C07DF928895 Ref B: HEL01EDGE1508 Ref C: 2022-11-27T07:38:55Z
Cache-Control: public, max-age=864273, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1-onenote-15.cdn.office.net/o/s/h15B03293E2D3F8A8_App_Scripts/1033/CommonIntl.js
200 OK 40 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h15B03293E2D3F8A8_App_Scripts/1033/CommonIntl.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ffa96f70281c306e5685aa3b6074197e
a4595fc69bfde6d0770eb624224585aeb11accd8
19c69fe7f6c1dca50ee964d97e92aaeff17e65372d261534d3632975c30f02ce
GET /o/s/h15B03293E2D3F8A8_App_Scripts/1033/CommonIntl.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 39831
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 13:44:46 GMT
Accept-Ranges: bytes
ETag: "7cf526baffdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: a681dbf0-0819-42f8-a6ac-c0bbac5f7832
X-UserSessionId: a681dbf0-0819-42f8-a6ac-c0bbac5f7832
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006959
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006959
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 22FC3F7B8A3D4F348C36A8291C5E42F9 Ref B: HEL01EDGE0417 Ref C: 2022-11-28T15:00:05Z
Cache-Control: public, max-age=977097, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":1,"Value":"SessionStarted","Type":"SessionBoundary"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 87177693-d800-4a13-a52e-4562020288a0
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006957
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006957
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 681058F9A3BE4000BED2A49FB486B8EC Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:13Z
date: Thu, 01 Dec 2022 07:35:12 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/h480EEB809CA38CB7_App_Scripts/onenoteSyncNew.min.js
200 OK 40 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h480EEB809CA38CB7_App_Scripts/onenoteSyncNew.min.js
IP
File type ASCII text, with very long lines (49359)
Hash fa5d46272c1cfb74e7aedc5e6d978e43
1e83ca82fb4799114e255ac492eacad3cd803d36
8eb356978cd25de4fff9aa6b8fa3144a9cc068264f40619a8f0700b54fbdda69
GET /o/s/h480EEB809CA38CB7_App_Scripts/onenoteSyncNew.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 39504
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Sun, 27 Nov 2022 15:51:27 GMT
Accept-Ranges: bytes
ETag: "dd225e1c782d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 6b1ba7b5-0ef4-4f38-88a0-597fce9a785d
X-UserSessionId: 6b1ba7b5-0ef4-4f38-88a0-597fce9a785d
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695C
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695C
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 7BA53009FC354394BD0F1A53B6D0377C Ref B: HEL01EDGE0706 Ref C: 2022-11-29T13:02:22Z
Cache-Control: public, max-age=1056479, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/hC804FFF0D565F4FF_App_Scripts/1033/OneNoteIntl.js
200 OK 6.6 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hC804FFF0D565F4FF_App_Scripts/1033/OneNoteIntl.js
IP
File type ASCII text, with very long lines (36642), with no line terminators
Hash 83d92b2f8994536bdfb8789fb82e4e0a
3c1ba4c4dd1937a5d6241abe3030ef12d7ef346e
5578016d488f42c1a59a30da5b6b44e4ea1bb44ee66bf2211a1a339738e9090f
GET /o/s/hC804FFF0D565F4FF_App_Scripts/1033/OneNoteIntl.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 6588
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:00:42 GMT
Accept-Ranges: bytes
ETag: "4fa8ee1a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 1cbba2b8-0c1a-4dd7-bbcc-78d3e0e18fb9
X-UserSessionId: 1cbba2b8-0c1a-4dd7-bbcc-78d3e0e18fb9
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006960
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006960
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 5C0EF092F14344B0BE4CBDD01F41542C Ref B: HEL01EDGE1707 Ref C: 2022-11-26T06:24:48Z
Cache-Control: public, max-age=773399, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/hCBA89239522795D5_App_Scripts/Compat.js
200 OK 1.4 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hCBA89239522795D5_App_Scripts/Compat.js
IP
File type ASCII text, with very long lines (6042), with no line terminators
Hash aedb9e12ccf3beac4c4d0afa66d8227f
62809ebe4fcbe01528bd36a22df4d5b6f402faad
f4b7739708a3e0b5800d555ce11ea2cdfa89efdc1be74d4d2852d8e07612f39d
GET /o/s/hCBA89239522795D5_App_Scripts/Compat.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1373
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:09 GMT
Accept-Ranges: bytes
ETag: "2cdc374692fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: d352b2c5-2131-4e4e-b105-7f1b4d1091c2
X-UserSessionId: d352b2c5-2131-4e4e-b105-7f1b4d1091c2
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 55A90DF4F41C44E9AB67BA70A588F7D6 Ref B: HEL01EDGE1817 Ref C: 2022-11-30T07:02:59Z
Cache-Control: public, max-age=1121219, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False
200 OK 29 kB URL HTTP/2 onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 8d8901cbeec049725ec8222184979169
a508481233a19dc4262fc2fa092f0de6c953cc9a
22d8b2fdee53b0ec07fe71c6bcf93a58abe4a19fc85df7c2020cd3760b91d8ba
GET /handlers/clientstring.mvc?mkt=en-US&group=Office&v=19.773.0927.2003&useRequiresJs=False HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/view.aspx?resid=C1F2B4CF865ED96D!104&wdo=2&authkey=!ALWZYoSaz6lCtLg
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:rOUulG7T2og=:31p+mTu/3FdBig+LEvppXJhWOxNx9QdgLTeBL/zdNJg=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=2; wla42=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 07:35:12 GMT
vary: Accept-Encoding
set-cookie: mkt=en-US; domain=.live.com; expires=Fri, 01-Dec-2023 00:00:00 GMT; path=/
xidseq=3; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 01-Dec-2022 05:55:12 GMT; path=/
E=P:g4/alG7T2og=:znjeNg280IN9Ewl2px6GwEgN7rNCp4uUXgKvGVeqsUM=:F; domain=.live.com; path=/
wla42=; domain=live.com; expires=Thu, 08-Dec-2022 07:35:12 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D99A0D3
x-odwebserver: eastus1-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 07419C0CCE614E139E04A9CAB500252C Ref B: OSL30EDGE0221 Ref C: 2022-12-01T07:35:12Z
date: Thu, 01 Dec 2022 07:35:12 GMT
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDs.js
200 OK 889 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDs.js
IP
File type ASCII text, with very long lines (1238)
Size 889 kB (889158 bytes)
Hash 017e6cf1a0be4f01c9cc535be030ddf9
ab2b0e2fb7392b94c3d4cfd1aee9ffdb1fbb7f46
abe59142742417c553c5b3606eeb87c2a7f26c764a9cd11652bc90fc54e9698e
GET /o/s/h6791CA385006CE7A_App_Scripts/OneNoteDs.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 889158
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:45 GMT
Accept-Ranges: bytes
ETag: "6289701099fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 7912ea6f-8fc2-4721-8e65-c9ce03998784
X-UserSessionId: 7912ea6f-8fc2-4721-8e65-c9ce03998784
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695E
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695E
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_visioslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: C98AB34DF2EC45EEA28832504B99FB65 Ref B: HEL01EDGE1910 Ref C: 2022-11-29T13:04:14Z
Cache-Control: public, max-age=1056501, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.8 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
File type Web Open Font Format, TrueType, length 2796, version 4.30147\012- data
Hash f7a3882336d73698919566847d10ba2f
25e0f263ff150bcced6c00163b2a4934cc0dccf7
0a8049c5627a132d4c0be08579b2a33f7e8fd285a122795cabadabf08ddb6858
GET /o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2796
Content-Type: font/x-woff
Last-Modified: Mon, 21 Nov 2022 11:05:14 GMT
Accept-Ranges: bytes
ETag: "c0daaf2199fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: d2032c3b-0e95-41ba-9895-54f343de1654
X-UserSessionId: d2032c3b-0e95-41ba-9895-54f343de1654
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695F
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695F
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 66140ACC166242D09F1BF6FCDABD59ED Ref B: HEL01EDGE1507 Ref C: 2022-11-22T11:31:29Z
Cache-Control: public, max-age=446149, immutable
Date: Thu, 01 Dec 2022 07:35:13 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":13,"Value":"https://c1-onenote-15.cdn.office.net:443/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css","Type":"ResourceDownloadSuccess"},{"Index":2,"MsSinceStart":332,"Value":"Making GetCells Request","Type":"BootLogs"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9bf3dc29-92f9-48e8-9c0b-9b7241f9ede0
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 493CDD8215EE4B398B07CC5D08D47406 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:14Z
date: Thu, 01 Dec 2022 07:35:13 GMT
content-length: 0
X-Firefox-Spdy: h2
onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=82c106e3-83bb-422e-9394-c23e4736f6be&clientVersion=16.0.15913.41006&appModeExtended=VIEW&sessionOrigin=UNKNOWN&hostId=0&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffolders%252FC1F2B4CF865ED96D%2521104%26access_token%3D4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%255FgeGGRSgaVcwjpuyulg0D8%252DM3G4hl935NpURgZ4%252DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%252Dx6H6jpw%26access_token_ttl%3D1671694512151
101 Switching Protocols 0 B URL HTTP/1.1 onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=82c106e3-83bb-422e-9394-c23e4736f6be&clientVersion=16.0.15913.41006&appModeExtended=VIEW&sessionOrigin=UNKNOWN&hostId=0&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffolders%252FC1F2B4CF865ED96D%2521104%26access_token%3D4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%255FgeGGRSgaVcwjpuyulg0D8%252DM3G4hl935NpURgZ4%252DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%252Dx6H6jpw%26access_token_ttl%3D1671694512151
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onenoteonlinesync/v2/sync?sessionId=82c106e3-83bb-422e-9394-c23e4736f6be&clientVersion=16.0.15913.41006&appModeExtended=VIEW&sessionOrigin=UNKNOWN&hostId=0&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffolders%252FC1F2B4CF865ED96D%2521104%26access_token%3D4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%255FgeGGRSgaVcwjpuyulg0D8%252DM3G4hl935NpURgZ4%252DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%252Dx6H6jpw%26access_token_ttl%3D1671694512151 HTTP/1.1
Host: onenoteonlinesync.onenote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://onenote.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +U3UHoqmUaOZ/c5JCiwelQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-CorrelationId: dc1c4f4a-f382-4789-9edc-67b8d0662071
X-UserSessionId: dc1c4f4a-f382-4789-9edc-67b8d0662071
X-OfficeFE: OneNoteOnlineSyncServiceEngine_IN_8
X-OfficeVersion: 16.0.15914.40453
X-OfficeCluster: neu-000.onenoteonlinesync.onenote.com
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-AspNet-Version: 4.0.30319
Sec-WebSocket-Accept: loZXHT21Xs4L+R1fqxGehInBV54=
Connection: Upgrade
X-Powered-By: ASP.NET
Date: Thu, 01 Dec 2022 07:35:14 GMT
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/wapsw.png?b=1601591341006
200 OK 5.9 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/wapsw.png?b=1601591341006
IP
File type PNG image data, 448 x 336, 8-bit/color RGBA, non-interlaced\012- data
Hash 93a322c8b54119cfe9b2cea455e9204e
42578d63a9340a1788b9319ca819ce0a2074c33d
390577d35c959ffe7dd2af4519c04410a04fdc4a433b151e27b049fc4a1ab3e9
GET /o/s/161591341006_resources/1033/wapsw.png?b=1601591341006 HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 5884
Content-Type: image/png
Last-Modified: Mon, 21 Nov 2022 11:04:47 GMT
Accept-Ranges: bytes
ETag: "4999a1199fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 2ae8cc5e-71e8-449d-a9ed-0234233e1e5f
X-UserSessionId: 2ae8cc5e-71e8-449d-a9ed-0234233e1e5f
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006021
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006021
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 9BBC9208A4814AE0AAB074F58CC36685 Ref B: HEL01EDGE1719 Ref C: 2022-11-26T23:22:53Z
Cache-Control: public, max-age=834369, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-ribbon-intl.min.js
200 OK 42 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-ribbon-intl.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (37525)
Hash edeeef2bf2dfed8bc02c9e64847e92d8
0d0283135eebd06d1e6c61b195d9d9afca56e382
cd74193129983ba62fa5552cf4ac583de7610a9522e95a59e90d02874360af4a
GET /o/s/161591341006_App_Scripts/1033/onenote-ribbon-intl.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 42435
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:13 GMT
Accept-Ranges: bytes
ETag: "94afce4892fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b4cc0fe2-7811-4f1d-b5f3-14ee6e518c5f
X-UserSessionId: b4cc0fe2-7811-4f1d-b5f3-14ee6e518c5f
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 07AEB189A8CF4E06A1D1AFFC580B9E32 Ref B: HEL01EDGE1921 Ref C: 2022-11-29T04:28:48Z
Cache-Control: public, max-age=1025662, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/common.min.js
200 OK 119 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/common.min.js
IP
File type ASCII text, with very long lines (51592)
Size 119 kB (119374 bytes)
Hash cba67742d8ec066bdd37ab503cf9e396
2eec4c27324c87370e3a260d3b74ddc5ee11c84f
a8ba85bdb18db9e2b2d79b69bf5c3239dd361057c8af21042c7db4bcc568d362
GET /o/s/161591341006_App_Scripts/common.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 119374
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:44 GMT
Accept-Ranges: bytes
ETag: "7b7adf99fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 3252e3c5-1e87-40bd-881e-b80be1ed1547
X-UserSessionId: 3252e3c5-1e87-40bd-881e-b80be1ed1547
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695E
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695E
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 8F595AE2FA5E48C48C35E9F596697D67 Ref B: HEL01EDGE1308 Ref C: 2022-11-29T13:01:08Z
Cache-Control: public, max-age=1056364, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-intl-mlr.min.js
200 OK 26 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-intl-mlr.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (37525)
Hash 1715951e226b6b41363a4170c4b8d9cc
ccb3ec3d22eceb7361e6da3cb18e14825305fb61
2761960632c65fb3f8f732d2d0b230422d1ff5134fabbc709b320db782c3c5f1
GET /o/s/161591341006_App_Scripts/1033/onenote-intl-mlr.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 25603
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:08 GMT
Accept-Ranges: bytes
ETag: "6b353ac9a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: e966c330-f8e5-4d43-8f06-224edda4bd64
X-UserSessionId: e966c330-f8e5-4d43-8f06-224edda4bd64
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: F63A80F59D244F279C0BA03EE9A8D0E6 Ref B: HEL01EDGE0316 Ref C: 2022-11-29T04:29:05Z
Cache-Control: public, max-age=1025637, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appChrome.min.js
200 OK 192 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appChrome.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 192 kB (191704 bytes)
Hash 7db4e2e6a4a867fadccd7720e460970c
a0311cbe8198e617ffe6ee260f26080e4dbdf824
0fdacad6a3b7821047f50cd69bf498c5b7fd4bda6ad775dd06052cac228ab653
GET /o/s/161591341006_App_Scripts/appChrome.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 191704
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:32 GMT
Accept-Ranges: bytes
ETag: "7d68e85392fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 88f701b9-cddb-4c6b-9831-afd7cd9c08f8
X-UserSessionId: 88f701b9-cddb-4c6b-9831-afd7cd9c08f8
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006020
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006020
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 452B9B5106B347F6B21EFB4098891453 Ref B: HEL01EDGE1616 Ref C: 2022-11-29T13:01:13Z
Cache-Control: public, max-age=1056389, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":984,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2b3b0aa8-db44-448c-a39f-57521c2e2da6
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 70C1464DD3CB460997077358A01528BB Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:14Z
date: Thu, 01 Dec 2022 07:35:13 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/progress.gif
200 OK 695 B URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/progress.gif
IP
File type GIF image data, version 89a, 24 x 24\012- data
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /o/s/161591341006_resources/1033/progress.gif HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 695
Content-Type: image/gif
Last-Modified: Mon, 21 Nov 2022 12:00:50 GMT
Accept-Ranges: bytes
ETag: "7fab5be6a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 193b2887-f701-4864-a392-d5d8480f8a69
X-UserSessionId: 193b2887-f701-4864-a392-d5d8480f8a69
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 1B23B699B57C4919A32672A259BA2CB7 Ref B: HEL01EDGE1319 Ref C: 2022-11-29T04:51:03Z
Cache-Control: public, max-age=1026963, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/hAEDBE0FA354BCBEA_resources/1033/segoeui.woff
200 OK 23 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/hAEDBE0FA354BCBEA_resources/1033/segoeui.woff
IP
File type Web Open Font Format, TrueType, length 22720, version 1.0\012- data
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /o/s/hAEDBE0FA354BCBEA_resources/1033/segoeui.woff HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://c1-onenote-15.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 22720
Content-Type: font/x-woff
Last-Modified: Thu, 24 Nov 2022 17:10:41 GMT
Accept-Ranges: bytes
ETag: W/"f4d499ae270d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 57c33dc0-3712-4f6b-85a9-312e24559305
X-UserSessionId: 57c33dc0-3712-4f6b-85a9-312e24559305
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006020
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006020
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 26464A2877F34F15AAA5CB5CB92CD8B5 Ref B: HEL01EDGE0319 Ref C: 2022-11-24T17:10:41Z
Cache-Control: public, max-age=639303, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/wacairspaceanimationlibrary.js
200 OK 6.1 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/wacairspaceanimationlibrary.js
IP
File type ASCII text, with very long lines (41569), with no line terminators
Hash 7749a9200d999b09704c291a23b3dab0
70794e85e6c1279bc92c3cc59d6c591d52b762b3
3e05f5ee1b16f7f99cd4003ccf7c5d79db3da86c22aabc695e574813cf133ce8
GET /o/s/161591341006_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 6113
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:38 GMT
Accept-Ranges: bytes
ETag: "a32687c99fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 064f9500-271d-494e-9d75-3f0311954996
X-UserSessionId: 064f9500-271d-494e-9d75-3f0311954996
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695E
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695E
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: E422C511180F4D35890E2AC256B5AB2E Ref B: HEL01EDGE1105 Ref C: 2022-11-29T13:05:06Z
Cache-Control: public, max-age=1056552, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/box42.png
200 OK 6.3 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/box42.png
IP
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /o/s/161591341006_resources/1033/m2/box42.png HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 6336
Content-Type: image/png
Last-Modified: Mon, 21 Nov 2022 12:50:45 GMT
Accept-Ranges: bytes
ETag: "c2f56fdfa7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 05c5bc36-d46e-48df-840d-0be10f8134ac
X-UserSessionId: 05c5bc36-d46e-48df-840d-0be10f8134ac
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006957
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006957
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: C913C3FEF8444CAA8B9C9A75CFF72A43 Ref B: HEL01EDGE1216 Ref C: 2022-11-29T04:31:16Z
Cache-Control: public, max-age=1025734, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-navpane-strings.min.js
200 OK 1.7 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-navpane-strings.min.js
IP
File type ASCII text, with very long lines (7385), with no line terminators
Hash c9c4f838a9819b141250d6c330b847bb
b1fe5b674ba8271911810b2253476cefe500dad6
451293c17a0513800902e76565a95dc1cf985fdb724a5ecc5af9322339a29baa
GET /o/s/161591341006_App_Scripts/1033/onenote-navpane-strings.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1689
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:08 GMT
Accept-Ranges: bytes
ETag: "69bd62c9a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 2e942540-5eeb-4410-bf5d-3edcdddcb0c9
X-UserSessionId: 2e942540-5eeb-4410-bf5d-3edcdddcb0c9
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: D3967867FB484A1DA491ABF47CE115AA Ref B: HEL01EDGE1919 Ref C: 2022-11-28T14:41:42Z
Cache-Control: public, max-age=975971, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
200 OK 1.8 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
IP
File type ASCII text, with very long lines (4174)
Hash 7ace6e4947d5016092db5cffed333c23
a9cd3e2f7ccb20a5153d42814d44595c3dd3bef5
aeafa755edb4b5e82f7b12fcf65dc9a896af7faecec9052934e0e90496a1766c
GET /o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1764
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 28 Oct 2022 11:48:18 GMT
Accept-Ranges: bytes
ETag: "d7f442cc3ead81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: d68698f6-4ea5-45b8-82eb-cac4b0a81fa1
X-UserSessionId: d68698f6-4ea5-45b8-82eb-cac4b0a81fa1
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695C
X-OfficeVersion: 16.0.15813.41015
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695C
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: E136537165814F73B80392DA4811ECF0 Ref B: HEL01EDGE1321 Ref C: 2022-11-08T05:24:51Z
Cache-Control: public, max-age=303194, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/box43.png
200 OK 1.9 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/box43.png
IP
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /o/s/161591341006_resources/1033/m2/box43.png HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1922
Content-Type: image/png
Last-Modified: Sun, 27 Nov 2022 15:51:33 GMT
Accept-Ranges: bytes
ETag: "573adc1f782d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 7002845e-94c7-4f89-b1c9-8cd36891496f
X-UserSessionId: 7002845e-94c7-4f89-b1c9-8cd36891496f
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695C
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695C
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 0A47BE2F4AA245938C5FDC3FE6136752 Ref B: HEL01EDGE0308 Ref C: 2022-11-28T07:45:11Z
Cache-Control: public, max-age=951020, immutable
Date: Thu, 01 Dec 2022 07:35:14 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151
200 OK 103 kB URL HTTP/2 onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Size 103 kB (102980 bytes)
Hash 13922701f87940fdad1d20ae38e4c00d
208cc5d51876340d6e28abd108dd9809a24f8de7
1ad2cb292c4f6e0f22b4f5bacfc04fca9c6488e4c0d84094b970f82f3a74618b
POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: false
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9d9e1ac1-5565-42fe-a611-a4bda8364c62
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006957
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006957
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 128BFC375FDF480584A8BC238D99D853 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:14Z
date: Thu, 01 Dec 2022 07:35:13 GMT
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/OneNote.ashx
200 OK 8.4 kB URL HTTP/2 onenote.officeapps.live.com/o/OneNote.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (65481), with no line terminators
Hash c4815ab5f89ba1f91ef09571fa67330e
d1a4ba8bef2d68120341b7e2db609b3b7ceb0749
e19b3a8e61c5bc306775145c8945bfb5da99d8d3da660fb5fae4cb08892618ea
POST /o/OneNote.ashx HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
Content-Type: application/json; charset=utf-8
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
X-AccessToken: 4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw
X-UserType: WOPI
X-WacCluster: PNL1
X-WacUserAgent: MSWACONSync
X-ServerSideRendering: RenderingNoImages
X-SessionStartDimensions: {"Application":"OneNote","Browser":"Firefox","BrowserMajorVersion":"105","BrowserVersion":"105.0","Host":"OneDriveWOPI","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"OTHER","UiHost":"OneDrive","UserSessionApplicationMode":"View","WACDatacenter":"PNL1"}
X-Requested-With: XMLHttpRequest
Content-Length: 2539
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 8403
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8a88762e-960a-49bf-9ba5-4a86e22380be
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695D
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000695D
x-wacfrontend: AM4PEPF0000695D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 2AA3FB0EC94B4A4ABA7903917B3B9198 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:13Z
date: Thu, 01 Dec 2022 07:35:14 GMT
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":4,"MsSinceStart":1488,"Value":"Get cells response received:200","Type":"BootLogs"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 473f1f0e-cd88-45d2-b96f-58095885ef67
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6C133CAC564743CF8D589846EE7666A6 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:14Z
date: Thu, 01 Dec 2022 07:35:14 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/one.png
200 OK 51 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/m2/one.png
IP
File type PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced\012- data
Hash eca50172a6583b16e553e9917fb710fb
2fd7fb2ff5c10e17e9066ce6bd2393e1f6b93cc0
fff5919a2cbaceae0528522b6c73e4f1d549ca8ee13c680b50ed377dfd2b61f0
GET /o/s/161591341006_resources/1033/m2/one.png HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 51120
Content-Type: image/png
Last-Modified: Mon, 21 Nov 2022 11:04:46 GMT
Accept-Ranges: bytes
ETag: "26bf2e1199fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 7b7e4eec-43e6-471d-97aa-bd3bc44cb178
X-UserSessionId: 7b7e4eec-43e6-471d-97aa-bd3bc44cb178
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006021
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006021
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 2AD27F8A5BF94441AB8A6D1FDAE8B6B4 Ref B: HEL01EDGE0912 Ref C: 2022-11-28T09:29:16Z
Cache-Control: public, max-age=957260, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":1490,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":6,"MsSinceStart":1492,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4b7b4494-b553-4792-8f29-db4eb0239010
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: B5551AA47DBC43A4863DB9F08729089C Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:15Z
date: Thu, 01 Dec 2022 07:35:14 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
200 OK 105 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
File type ASCII text, with very long lines (65443)
Size 105 kB (105262 bytes)
Hash f7bae2f452361f9473cf5d7fcbe63a99
5a88401a3ebc03652f4702016869363977234935
f07edf42858b3af47e31d6456e035d5cc178f2af6f521165fcfbcb10f1292e93
GET /o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 105262
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:00:17 GMT
Accept-Ranges: bytes
ETag: "d5abb9d2a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: cc79ae16-960e-4e3e-b042-99d59254ac1a
X-UserSessionId: cc79ae16-960e-4e3e-b042-99d59254ac1a
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 3D33677C15CE4D1E8A19B6998A5303DE Ref B: HEL01EDGE0913 Ref C: 2022-11-22T01:36:15Z
Cache-Control: public, max-age=410473, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
X-AccessToken: 4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw
X-AccessTokenTtl: 1671694512151
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 16367
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3abca45e-6fc3-4f94-8dfb-bc8f162986b3
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006957
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006957
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4AF5B5CD2971468C8F528475C53DDEE1 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:15Z
date: Thu, 01 Dec 2022 07:35:14 GMT
content-length: 0
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7B0305c38b-3c1a-4c70-9760-96c195e6366a%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
200 OK 755 B URL HTTP/2 onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7B0305c38b-3c1a-4c70-9760-96c195e6366a%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (946), with no line terminators
Hash 70364646cc70d2a3a1f676d0eaabaf9f
21534d2deeedef0fee112140ae08b7254d9d7e5c
44284c3105551eed03ca95102f5c7641480e708217760086be2edf9fc78af4b2
GET /o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7B0305c38b-3c1a-4c70-9760-96c195e6366a%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 755
content-type: text/plain; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 07:35:15 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151{0305c38b-3c1a-4c70-9760-96c195e6366a}{1}"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d60e740d-88a2-411c-882e-edb7158bd6f0
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4BEAF34A5DCC4C888D325B350C76606B Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:15Z
date: Thu, 01 Dec 2022 07:35:14 GMT
X-Firefox-Spdy: h2
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL HTTP/2 static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0\012- data
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: static2.sharepointonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 36344
content-type: application/font-woff2
content-md5: hl8dtlRfyUovRETdYOe7xg==
last-modified: Thu, 02 Nov 2017 17:22:02 GMT
etag: 0x8D522163B704E10
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c6e23372-a01e-00a1-7b86-c85d50000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=24610131
date: Thu, 01 Dec 2022 07:35:15 GMT
X-Firefox-Spdy: h2
static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL HTTP/2 static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0\012- data
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: static2.sharepointonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 31824
content-type: application/font-woff2
content-md5: ZtEeVbekE932qE6Fhpfntg==
last-modified: Thu, 26 Oct 2017 19:02:14 GMT
etag: 0x8D51CA4122953A7
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a66900ba-801e-000f-7b86-c8f041000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=24610134
date: Thu, 01 Dec 2022 07:35:15 GMT
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bd14b170e-6e4a-4f69-9119-48042a373e6b%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
200 OK 5.3 kB URL HTTP/2 onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bd14b170e-6e4a-4f69-9119-48042a373e6b%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (8315), with no line terminators
Hash 0506cffbbd7e757717b1e9b737972cf9
253e26ec52071345a2b89f3f6672d8b666ab25ed
03d2e0373f73aed8c6bc6cc42a5f89393e3cc08c42c40c8a1f97716d78ac5ef2
GET /o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bd14b170e-6e4a-4f69-9119-48042a373e6b%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 5306
content-type: text/plain; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 07:35:15 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151{d14b170e-6e4a-4f69-9119-48042a373e6b}{1}"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: efe0f829-89b7-454d-9bbc-ddfb4b0a2aa7
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695B
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000695B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 66AF47213D924C34B3600C8671DA2377 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:15Z
date: Thu, 01 Dec 2022 07:35:15 GMT
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/common50.min.js
200 OK 311 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/common50.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 311 kB (311434 bytes)
Hash 8adb08e773373bd6088bc70da93577a0
f59256e4402a6d4760e35fd904d9ab0fd0c04166
dfa32b15c19723e8d8658070f9b92d2bbca3c9c808ddedba2459a2d701246009
GET /o/s/161591341006_App_Scripts/common50.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 311434
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 11:05:29 GMT
Accept-Ranges: bytes
ETag: "80225d2a99fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 41716c33-51fa-450a-93e7-fa24505a0c33
X-UserSessionId: 41716c33-51fa-450a-93e7-fa24505a0c33
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695E
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695E
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 202AEA4DBE5B4F8D8543D6EA54BA28BB Ref B: HEL01EDGE1721 Ref C: 2022-11-27T22:22:18Z
Cache-Control: public, max-age=917181, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bfa756a04-44de-4a51-9d94-bfc1f1f2e6d7%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
200 OK 876 B URL HTTP/2 onenote.officeapps.live.com/o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bfa756a04-44de-4a51-9d94-bfc1f1f2e6d7%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1106), with no line terminators
Hash d1c7f483d9f8a41e3104906796b9787f
69b1b7faac89d2beba9a3294d851e61f84a3d1c6
cf03dc5465d3d35e56cfc4f489f7adadd850e3b55735e859229612dfb2c4c0be
GET /o/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151&ObjectDataBlobId=%7Bfa756a04-44de-4a51-9d94-bfc1f1f2e6d7%7D%7B1%7D&usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&wdwacuseragent=MSWACONSync&DataUrlEnabled=true HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 876
content-type: text/plain; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 07:35:15 GMT
etag: "WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2FC1F2B4CF865ED96D%21111&access_token=4wGZc9JelMJpaYfh1IIgMTk%5FK%2DPoTGun5TwY7%2DDyS4rP19DPhBCzo7ZNu23h2XiDT6AHzDBOuZsivC5R2pF%5Fo0kr0ypiEgkVRL4ivW1EpMQVXHHF8%2Dm3x9we3i8mgI4cU%2DAghRKWS8CNU3%5FC7eezyutA&access_token_ttl=1671694512151{fa756a04-44de-4a51-9d94-bfc1f1f2e6d7}{1}"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a34f6c49-6f89-46db-8e75-a13ea750f3a0
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006B55
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006B55
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: EDBD3067EFE44624B040EA77EEB58837 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:15Z
date: Thu, 01 Dec 2022 07:35:15 GMT
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appChromeLazy.min.js
200 OK 128 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appChromeLazy.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 128 kB (128368 bytes)
Hash 165dfa8c6eee3e8c9b17b009c2df463d
4188c9353d125749fd3a0c5683ec4e18f0a2ddf1
b3898718468007dbdfbc4dec5315dce2fd15379d763a70be0412544c9e401f8f
GET /o/s/161591341006_App_Scripts/appChromeLazy.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 128368
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:09 GMT
Accept-Ranges: bytes
ETag: "6f541acaa7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 45781ca4-772b-4a2a-af0f-b96dc6b8be98
X-UserSessionId: 45781ca4-772b-4a2a-af0f-b96dc6b8be98
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 1FC87B83268E4DD3B754FCD3551ABC56 Ref B: HEL01EDGE1814 Ref C: 2022-11-29T14:44:30Z
Cache-Control: public, max-age=1062562, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/uiSlice20.min.js
200 OK 95 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/uiSlice20.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Hash 34a193ea3f990f106bdaf9561ccf18e3
c1ff3629264963940eb4c2d68785962a7af5c7a1
6494fec2fd840b4871095ec29aea62f118ad83dfc8be9aab9a29dc1c981793fd
GET /o/s/161591341006_App_Scripts/uiSlice20.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 94946
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:45 GMT
Accept-Ranges: bytes
ETag: "b09d641099fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: f2710b50-dc18-4507-9c72-6ab1a4325f41
X-UserSessionId: f2710b50-dc18-4507-9c72-6ab1a4325f41
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695E
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695E
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 907BF21741044D5DADF88B729523B98A Ref B: HEL01EDGE1814 Ref C: 2022-11-29T14:45:27Z
Cache-Control: public, max-age=1062598, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
200 OK 48 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash df0924d763fed61a9a28b1095831e0c9
d9fb6baf2812eeee8b71bbf19e6a911ec400e612
3085d78743dffdb3a81d9e59b5045f408e75d2c4e1700ac13fb82caa4cef6895
GET /o/s/161591341006_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 48275
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:58:49 GMT
Accept-Ranges: bytes
ETag: "5e6d19da0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 0162d45c-5ad9-431f-b78f-55ff2885cf37
X-UserSessionId: 0162d45c-5ad9-431f-b78f-55ff2885cf37
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006022
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006022
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: C5598CE0C8E146E2BF1FA3BDB0358988 Ref B: HEL01EDGE1921 Ref C: 2022-11-29T04:28:32Z
Cache-Control: public, max-age=1025546, immutable
Date: Thu, 01 Dec 2022 07:35:15 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appIconsLazy.min.js
200 OK 62 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/appIconsLazy.min.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (39818)
Hash 1725fd2cd124dfe226ee6f4dfd30833c
d99d7c6468916efdd635cfc3234f322b55aef829
cf7ef8faf3672a300129ac56b7b191e7a071c342f0417c9d660d49e1df0f503a
GET /o/s/161591341006_App_Scripts/appIconsLazy.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 61778
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 14:34:44 GMT
Accept-Ranges: bytes
ETag: "8e7e1366b6fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 89c77c4d-3d2d-4b54-ad4d-b1f4c837be3b
X-UserSessionId: 89c77c4d-3d2d-4b54-ad4d-b1f4c837be3b
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B53
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B53
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: FDF2A72021DB469E9C54B3D68951D31E Ref B: HEL01EDGE1221 Ref C: 2022-11-29T14:47:40Z
Cache-Control: public, max-age=1062745, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 125
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fd2f7fc4-2fdb-4e8c-81d8-9993aa0fab48
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: D611AABF3D684A869ECC2AB8903C95BF Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:16Z
date: Thu, 01 Dec 2022 07:35:15 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/jquery-1.7.2-39eeb07e.js
200 OK 33 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/jquery-1.7.2-39eeb07e.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (32103)
Hash e06828a30c5961dbf764baa379145027
00a29e24ee9d45b9d3393796db6b7ae0d797ee55
4dd9ca83d03bf316fb56793d4b1dfc5b6fa203c91d1042ca7edfe19347a313fe
GET /files/onedrive-website-release-prod_master_20220804.001/jquery-1.7.2-39eeb07e.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 33335
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:47 GMT
x-ms-request-id: e17265ff-901e-0003-5367-ae2ba5000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac_s_office-f32cbea6.js
200 OK 114 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac_s_office-f32cbea6.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (32026)
Size 114 kB (114275 bytes)
Hash 6e52f01d66b986b8032dda394643d127
8d8a38242bdc851ac4b431095885e5107f12179b
5a6359a2df7372c617a0ff51670f7ea33575392a41f7e058d43b51c7aa432a4f
GET /files/onedrive-website-release-prod_master_20220804.001/wac_s_office-f32cbea6.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 114275
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: 0c4004f0-801e-0002-4a42-bd412f000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4718
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 32283427-02d0-4949-8c0b-d6688a3b09a7
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-buls-suppressedtags: 378069,1671813,2209344,3249545,3290144,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159499,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: C710E5D6AA2646B0B1B4B2AB14458A72 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:16Z
date: Thu, 01 Dec 2022 07:35:15 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreonavpane.min.js
200 OK 54 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreonavpane.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash be31ac157285bc82c389fbb40b87ab4d
23125658ec27f2c4cfe0f804621baff83be29b24
b81e19dc716c961bc2c84eafb4a903936cb7dd2189e6a8755300a965d0f9460c
GET /o/s/161591341006_App_Scripts/oreonavpane.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 53945
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 17 Nov 2022 00:20:31 GMT
Accept-Ranges: bytes
ETag: W/"80f1e7661afad81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: efe7dbc5-8a3f-45af-ae31-65f3c1d5f900
X-UserSessionId: efe7dbc5-8a3f-45af-ae31-65f3c1d5f900
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695F
X-OfficeVersion: 16.0.15813.41015
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695F
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 48D281D2E8FF4019873573C385E97069 Ref B: HEL01EDGE1318 Ref C: 2022-11-17T00:20:31Z
Cache-Control: public, max-age=1062499, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreolazy.min.js
200 OK 14 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreolazy.min.js
IP
File type ASCII text, with very long lines (61838)
Hash 6325ffd3b8d5ed8b06864f73802456bc
19d0b4f8ad606cd2a05834ad81a8d237ce6876ae
993e0e1bd465de75a76568e66e97657d495ca35a55e3025c6395094bbc2f9bec
GET /o/s/161591341006_App_Scripts/oreolazy.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 14152
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:15:34 GMT
Accept-Ranges: bytes
ETag: "212ae3192fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 8b4f8809-dffb-49c0-a3cc-9136d5aa7c11
X-UserSessionId: 8b4f8809-dffb-49c0-a3cc-9136d5aa7c11
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B54
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B54
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 801125D46EDE41219B2178C51611A081 Ref B: HEL01EDGE0407 Ref C: 2022-11-29T14:44:32Z
Cache-Control: public, max-age=1062536, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac2-d8541046.js
200 OK 109 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac2-d8541046.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (32005)
Size 109 kB (109105 bytes)
Hash 69555d9cc0aa86aa6074314049acd508
07970068e38492e588f0a3873cb6065393f4bfad
b826124f16a977b29daa97c0742d91ec0ec95c52d3cf1c2e8d259582c4c06929
GET /files/onedrive-website-release-prod_master_20220804.001/wac2-d8541046.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 109105
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: 4d33a195-301e-0057-7767-ae64f2000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac0-efa56458.js
200 OK 5.9 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac0-efa56458.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15157), with no line terminators
Hash d548d4808298022cc1367319d8e471bd
c0b5c5f217012cac34a499fd8f74bbfbd827a7fa
5679746da69768cd6c119a095416dfc481a33fdcf879211ac41b324b882589c4
GET /files/onedrive-website-release-prod_master_20220804.001/wac0-efa56458.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 5910
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: db942780-f01e-0048-7e67-aed7f6000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac1-cdc297b4.js
200 OK 14 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001/wac1-cdc297b4.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (32025)
Hash 871e61f5160c324c44b4dea715adfc43
936fa9b9fc71593f86e030549a3b115e2acdde35
337e4d3ae2bfd85918257bd2cdd00d7ff85ed83078dc1aaf2b7576c2bdc616a3
GET /files/onedrive-website-release-prod_master_20220804.001/wac1-cdc297b4.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 14062
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:50 GMT
x-ms-request-id: 0b13f325-501e-0051-6e67-ae574d000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll1.js
200 OK 472 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll1.js
IP
File type ASCII text, with very long lines (581)
Size 472 kB (471724 bytes)
Hash 01696f03af8fc1e56375ab4af86baa11
98e66479b8b8ae62e0a2c747a64f4bb37ac63432
793a18c290cd4a1f4b552f4a6950bc3d45ae6c63b6a107f13b6cfa0d3901ff84
GET /o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll1.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 471724
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Thu, 24 Nov 2022 04:35:47 GMT
Accept-Ranges: bytes
ETag: "82313239beffd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 82cf1abd-b114-4836-a808-45877d4c2e9f
X-UserSessionId: 82cf1abd-b114-4836-a808-45877d4c2e9f
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: AF7B6F32FB2C4534A784A966BFB0B6E1 Ref B: HEL01EDGE0317 Ref C: 2022-11-29T04:20:17Z
Cache-Control: public, max-age=1025134, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/onenoteloadingspinner.min.js
200 OK 1.6 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/onenoteloadingspinner.min.js
IP
File type ASCII text, with very long lines (22080)
Hash 3eff002579120a2681fef37696971137
beaaa6b43773ee0657d731152ac3e4779c4ec5f8
f4a6095fb06d3163026001a9f5337892abb1f64a70099d8ab363db32ece3b47b
GET /o/s/161591341006_App_Scripts/onenoteloadingspinner.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1625
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 13:43:41 GMT
Accept-Ranges: bytes
ETag: "b7d26f44affdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 8c6ce312-d805-41a1-83ff-dc22e74ea607
X-UserSessionId: 8c6ce312-d805-41a1-83ff-dc22e74ea607
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B52
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B52
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: F738E0A916E2430AB4F3A9BC03064BBA Ref B: HEL01EDGE1214 Ref C: 2022-11-29T14:48:20Z
Cache-Control: public, max-age=1062751, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreonotebookpane.min.js
200 OK 1.3 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreonotebookpane.min.js
IP
File type ASCII text, with very long lines (2948)
Hash d34a45f80f42207dada05384a2e56e58
57312ad239c11f4818042fa09b3851e99f021fe7
d3ea62a43c72961370e5f257f4bed7c7c5f924af7616c80f3b55b9d371dc85d8
GET /o/s/161591341006_App_Scripts/oreonotebookpane.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1270
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 12:01:01 GMT
Accept-Ranges: bytes
ETag: "80fc63eca0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 75f85547-abbc-47cd-a41b-06d4a71fb9d3
X-UserSessionId: 75f85547-abbc-47cd-a41b-06d4a71fb9d3
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 5473A5A328214318B0A94B67BBDFD3F9 Ref B: HEL01EDGE0415 Ref C: 2022-11-28T02:10:21Z
Cache-Control: public, max-age=930985, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Content-Type: text/plain;charset=UTF-8
Content-Length: 3979
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 70c113d9-8809-40e9-b21c-d8390ed59aed
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695B
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000695B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 0B48397321D441109746BDE0EFA5F8F4 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:16Z
date: Thu, 01 Dec 2022 07:35:16 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreosearchpane.min.js
200 OK 15 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/oreosearchpane.min.js
IP
File type ASCII text, with very long lines (59926)
Hash 85659aa4f70c4c86dff2d6bf1edfba6b
89401f2a88bfbf97cc510d774420eecef74c9aaf
f9c6546297b0d89b72e406eaec9235d436810581042ca44542dc992a5e1d3741
GET /o/s/161591341006_App_Scripts/oreosearchpane.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 15335
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:27 GMT
Accept-Ranges: bytes
ETag: "b03bf7599fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 3834b415-28fb-4b07-85a1-ca89804e8803
X-UserSessionId: 3834b415-28fb-4b07-85a1-ca89804e8803
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B55
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B55
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 6F43B07FE507416AAA17B3369DE3F892 Ref B: HEL01EDGE0909 Ref C: 2022-11-29T14:46:19Z
Cache-Control: public, max-age=1062682, immutable
Date: Thu, 01 Dec 2022 07:35:16 GMT
Connection: keep-alive
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
200 OK 0 B URL HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1095
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1917
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Thu, 01 Dec 2022 07:35:16 GMT
spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
200 OK 152 kB URL HTTP/2 spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 151924, version 0.0\012- data
Size 152 kB (151924 bytes)
Hash e80ff72e03e780056cfdbd85c63404ce
c450a1a6233f0fbc6dbffb7fee251e378f64ef32
05828d625dcb5781d0a3cc67a2429ced535fdf848b8b8075d49751eb5b30c7af
GET /files/fabric/assets/icons/fabricmdl2icons.woff HTTP/1.1
Host: spoprod-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff
content-md5: 6A/3LgPngAVs/b2FxjQEzg==
last-modified: Fri, 11 May 2018 22:37:14 GMT
etag: 0x8D5B78FBE15F296
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2ef643d7-c01e-0060-702b-d558f0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
content-length: 151924
cache-control: public, max-age=19367171
date: Thu, 01 Dec 2022 07:35:17 GMT
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
timing-allow-origin: *
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
200 OK 103 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103185 bytes)
Hash 67c425cb3971486cbb2542a5b0da7b80
acff79a9482de0de97b54890c5edcea8fd4dd49d
92f87a8690e31149fb13f6e622f7a04c1fd919fa66653621cc2dd5fee461f78a
GET /o/s/161591341006_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 103185
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 11:04:02 GMT
Accept-Ranges: bytes
ETag: "0fd81f698fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: fcdefd52-c985-4b47-a685-10be402a4397
X-UserSessionId: fcdefd52-c985-4b47-a685-10be402a4397
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B55
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B55
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 903B1DA641764912B5ABD0338BE5A75E Ref B: HEL01EDGE1214 Ref C: 2022-11-28T15:00:07Z
Cache-Control: public, max-age=977035, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
200 OK 34 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
IP
File type ASCII text, with very long lines (61584), with CRLF line terminators
Hash 44d2061fac90f426c4a911def46f5694
e4cc1a008a426caab7314d50042a46aa104034c5
d847816869ddbf2c18a63ead29c184107da20aa70f46a9aa04185c07449d69e3
GET /o/s/161591341006_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 33894
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 11:04:39 GMT
Accept-Ranges: bytes
ETag: "a75f26d99fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 22dd0ef0-68e8-481a-a9fe-e69f78a4f9e5
X-UserSessionId: 22dd0ef0-68e8-481a-a9fe-e69f78a4f9e5
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006021
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006021
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 12DA622F95654AE6B8BD6ABC75C5FE54 Ref B: HEL01EDGE1915 Ref C: 2022-11-29T14:45:51Z
Cache-Control: public, max-age=1062667, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/OfficeExtension.WacRuntime.js
200 OK 20 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/OfficeExtension.WacRuntime.js
IP
File type ASCII text, with CRLF line terminators
Hash 650cfd2d632bc676b0bf679107f15371
0b8086b3bb18dcf56555064b6312c0a8229af9ee
871aa424a35a4a6be11ec1dfd5ade74b73516c2996509fd90defa4cbb385b5ac
GET /o/s/161591341006_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 19540
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 11:04:16 GMT
Accept-Ranges: bytes
ETag: "038dafe98fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 0ca3f405-8797-43a6-afe3-1186e7c071e9
X-UserSessionId: 0ca3f405-8797-43a6-afe3-1186e7c071e9
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695F
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695F
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 52BB784F2F3C498F89CD0BF32C157E2E Ref B: HEL01EDGE1717 Ref C: 2022-11-27T22:22:20Z
Cache-Control: public, max-age=917147, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
Vary: Accept-Encoding
res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filesbucket3-5286f09d.css
200 OK 2.2 kB URL HTTP/2 res-1.cdn.office.net/files/onedrive-website-release-prod_master_20220804.001//filesbucket3-5286f09d.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (8026), with no line terminators
Hash 8e9e7bf279db000fc6c32738485056a5
0fc5198eaf09341003a9b749b84d8f47c5361419
dd167a94bf33df6f55b651862c05eeaf42d97a57b614aca5a64f77d9656c8611
GET /files/onedrive-website-release-prod_master_20220804.001//filesbucket3-5286f09d.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 2247
content-type: text/css
content-encoding: gzip
last-modified: Fri, 05 Aug 2022 05:56:51 GMT
x-ms-request-id: db9433ae-f01e-0048-6067-aed7f6000000
cache-control: public, max-age=630720000
date: Thu, 01 Dec 2022 07:35:17 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll2.js
200 OK 336 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll2.js
IP
File type ASCII text, with very long lines (811)
Size 336 kB (336223 bytes)
Hash 9d57b4d35a40fc59d39bfba1c20a3e01
a707a65146b18dc30dd541b7c70645fb5a551645
99fa3348a9192bc1b1ac621f179d1f29e2fca5963a282adab997f776831456d7
GET /o/s/h6791CA385006CE7A_App_Scripts/OneNoteDS.box4.dll2.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 336223
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Tue, 29 Nov 2022 06:39:56 GMT
Accept-Ranges: bytes
ETag: "bc77c65bd3d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: a1ae3918-a2b9-459e-b625-5254138f9704
X-UserSessionId: a1ae3918-a2b9-459e-b625-5254138f9704
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006021
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006021
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 8BA73F7A76ED488BA6E468010B54698A Ref B: HEL01EDGE1115 Ref C: 2022-11-29T14:44:50Z
Cache-Control: public, max-age=1062578, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
200 OK 6.0 kB URL HTTP/2 onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Hash 365c2cb69866db8652c9df42f55ebde9
a53d93eff95757bcb05b500bb99ae84162eff915
1dafcdc390c84110e6f74ef35260258cb7e94b8d52da1e614fccbbb3a9282e62
GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5979
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 30 Aug 2022 19:54:25 GMT
accept-ranges: bytes
etag: "802e354eaabcd81:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f942f4c0-1de8-42a5-93ae-d56f6ddaa776
x-usersessionid: f942f4c0-1de8-42a5-93ae-d56f6ddaa776
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695B
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-officefd: AM4PEPF0000695B
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 21326EDE2BED4A26AC4C676B862D0CAF Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:17Z
date: Thu, 01 Dec 2022 07:35:16 GMT
X-Firefox-Spdy: h2
c.live.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406
302 Found 0 B URL HTTP/2 c.live.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406 HTTP/1.1
Host: c.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BP=l=SDX.Skydrive&FR=&ST=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&RedC=c.live.com&MXFR=263D5AB969F1669A0F3648D46DF16211
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.live.com; path=/; SameSite=None; Secure;
MUID=263D5AB969F1669A0F3648D46DF16211; domain=.live.com; expires=Tue, 26-Dec-2023 07:35:17 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 01 Dec 2022 07:35:17 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 5.1 kB URL HTTP/2 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with very long lines (25305), with no line terminators
Hash 35de0344535ab548b4580d03f300cd17
442b74d2925cc5b96196275e277d2a467c6bcee1
5d0bf5f6b63127f4bbb5d419edd8ed7ff0fa8d66bdb63fed971cf955a912e0f7
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: e64e94cc-5573-499c-90e7-7fdcdb90322e
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Thu, 01 Dec 2022 07:35:17 GMT
content-length: 5118
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback.css
200 OK 2.8 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
File type ASCII text, with very long lines (19234)
Hash 8249361451aa7cb3e9209aba98a91387
8fbcad2b4135b98032fba5bc418c1e01583e57d4
abe04518f423abf5836cf1203c74d54914d1c60dda0f983f24662bb27a4e2d66
GET /o/s/161591341006_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2769
Content-Type: text/css
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:00:17 GMT
Accept-Ranges: bytes
ETag: "d5abb9d2a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b68b2df1-7691-4e24-a70e-e46dc2e6db0a
X-UserSessionId: b68b2df1-7691-4e24-a70e-e46dc2e6db0a
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006961
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006961
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 9441AE0F3B4641ACA4FCE14DA7FEA628 Ref B: HEL01EDGE0709 Ref C: 2022-11-22T01:36:32Z
Cache-Control: public, max-age=410446, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
200 OK 786 B URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
File type ASCII text, with very long lines (2224), with no line terminators
Hash 6b088d3732707dc4cf7ad8a40e03b059
7a84a9e12aec17b6db8c2b4187ec8cd11df22042
0b65ac42e497fc7ccf9341e6b4768c135b642ee2465413c9616bb79ed86b30c9
GET /o/s/161591341006_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 786
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:14 GMT
Accept-Ranges: bytes
ETag: "aac2b4992fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: d0035689-4d31-42a4-8337-a69bca94915b
X-UserSessionId: d0035689-4d31-42a4-8337-a69bca94915b
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: C75F5174F6A542EB9F5DF4972E9BF422 Ref B: HEL01EDGE1821 Ref C: 2022-11-22T01:36:32Z
Cache-Control: public, max-age=410396, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/otel.worker.min.js
200 OK 28 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/otel.worker.min.js
IP
File type ASCII text, with very long lines (49365)
Hash e2cafcc8c7bb733265832d6c53f10c09
8a348ef05d6963dba1e7d8b56bc1b60177dbd7ba
2a926353bf9b00dd39d6facf0b96bb062a35625841217957f45b5c31a40bf9e3
GET /o/s/161591341006_App_Scripts/otel.worker.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 28175
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:04 GMT
Accept-Ranges: bytes
ETag: "a8fcdec6a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b2b44abd-c2d6-430a-b955-6904bd6cb0d5
X-UserSessionId: b2b44abd-c2d6-430a-b955-6904bd6cb0d5
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: D4843BD757C649BA82FD0BBCC029F1D8 Ref B: HEL01EDGE1314 Ref C: 2022-11-29T04:20:12Z
Cache-Control: public, max-age=1025128, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
File type JSON data\012- , ASCII text
Hash 919a5b492d9963b9ce9647f91a6f18a8
7fed2f5fc2bd3211b9d5e7beaa19cf3895a68ecb
1361f5d78e770fd7b1a8290666c69ea83e02975a71b69d4ad37010dd721b4ca0
GET /o/s/161591341006_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 4429
Content-Type: application/json
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 10:16:56 GMT
Accept-Ranges: bytes
ETag: "09c146292fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 1d9ebb53-4f27-45e6-a7b4-19445f1c1c97
X-UserSessionId: 1d9ebb53-4f27-45e6-a7b4-19445f1c1c97
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordcapacity_control,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 37641EA725094B5488B4EF3258643F8B Ref B: HEL01EDGE1720 Ref C: 2022-11-29T06:07:39Z
Cache-Control: public, max-age=1031505, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
Vary: Accept-Encoding
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
200 OK 0 B URL HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.5.0&x-apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1166
Origin: https://onedrive.live.com
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1506
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Thu, 01 Dec 2022 07:35:17 GMT
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
200 OK 2.0 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
File type ASCII text, with very long lines (7514), with no line terminators
Hash f5e913c674615324eaee392a5c0d8091
b03ee48579c156902fef2c1f4d0bcd31e7ce19bb
a9319a09689113b67b9a0716862a5cbc617f41b899b1b47d1c698832d80a2cef
GET /o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2014
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:00 GMT
Accept-Ranges: bytes
ETag: "456a7ac4a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 96e1dbeb-3e73-4fbb-af38-014848a9c0de
X-UserSessionId: 96e1dbeb-3e73-4fbb-af38-014848a9c0de
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006962
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006962
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: FE529A9F75B14327B28E0FBB73A7C4F0 Ref B: HEL01EDGE1912 Ref C: 2022-11-29T05:30:04Z
Cache-Control: public, max-age=1029278, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
X-AccessToken: 4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw
X-AccessTokenTtl: 1671694512151
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 24086
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 494f9a93-2e2f-4cd5-9224-d62592560094
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695D
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000695D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AC7ED7D200B24461B1B723AD1CC92FEE Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:18Z
date: Thu, 01 Dec 2022 07:35:17 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
200 OK 86 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
File type Unicode text, UTF-8 text, with very long lines (65312), with no line terminators
Hash a4ff662b5efeb9aaef39aadf44fd98d3
ac0b2ac749641ef90e1f7f51f9470cb7e1b0eb05
e1c87ec50e09ae0757ace39f5dce84517d5e7d25e96a1322bd18b7f818acfaa1
GET /o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 86328
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 14:34:42 GMT
Accept-Ranges: bytes
ETag: "0ed8864b6fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: be54ec72-6e7f-4008-95fc-03882c64e196
X-UserSessionId: be54ec72-6e7f-4008-95fc-03882c64e196
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695B
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695B
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 24AAEECEBC4448B3982C0640A69E479C Ref B: HEL01EDGE1110 Ref C: 2022-11-28T02:10:21Z
Cache-Control: public, max-age=930992, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
Vary: Accept-Encoding
c.bing.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&RedC=c.live.com&MXFR=263D5AB969F1669A0F3648D46DF16211
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&RedC=c.live.com&MXFR=263D5AB969F1669A0F3648D46DF16211
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&RedC=c.live.com&MXFR=263D5AB969F1669A0F3648D46DF16211 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.live.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&MUID=263D5AB969F1669A0F3648D46DF16211
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=263D5AB969F1669A0F3648D46DF16211; domain=.bing.com; expires=Tue, 26-Dec-2023 07:35:18 GMT; path=/; SameSite=None; Secure; Priority=High;
SRM_B=263D5AB969F1669A0F3648D46DF16211; domain=c.bing.com; expires=Tue, 26-Dec-2023 07:35:18 GMT; path=/; SameSite=None; Secure;
SRM_L=263D5AB969F1669A0F3648D46DF16211; domain=c.bing.com; expires=Tue, 26-Dec-2023 07:35:18 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 64A0BAD1A7AB403E9308D013B56ED7B0 Ref B: OSL30EDGE0521 Ref C: 2022-12-01T07:35:18Z
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/uiFabricLazy.min.js
200 OK 786 B URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/uiFabricLazy.min.js
IP
File type ASCII text, with very long lines (1837)
Hash 3df44b8ab9426ff5189ad643146b29e2
6498f89af9982f2f954b45aeb087389135692ff4
3db5f5cef76fd4686f1c1e90a62d5e6c6841bae33710fd42ded6b316114e6588
GET /o/s/161591341006_App_Scripts/uiFabricLazy.min.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 786
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:15:34 GMT
Accept-Ranges: bytes
ETag: "e9fdb93192fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 2d608961-f075-446a-be0b-340d34a95853
X-UserSessionId: 2d608961-f075-446a-be0b-340d34a95853
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B54
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B54
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 2F50605731014FB481E1A678D940D68D Ref B: HEL01EDGE0416 Ref C: 2022-11-29T14:44:45Z
Cache-Control: public, max-age=1062576, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/osfruntime_strings.js
200 OK 2.2 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/1033/osfruntime_strings.js
IP
File type ASCII text, with very long lines (11325), with no line terminators
Hash 2e835fc1c1a77cc5e2335f490f30c64c
948c45c7098127932568a6e5d167a4e6f57e5155
5db5603e546d731255c14fe40aaef761086cf946af7b436b51a124ca19f2c6ae
GET /o/s/161591341006_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2188
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:26 GMT
Accept-Ranges: bytes
ETag: "81eca55092fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 797923c0-b998-43e5-92f8-6e92c21605c8
X-UserSessionId: 797923c0-b998-43e5-92f8-6e92c21605c8
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006020
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006020
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 44A9ADCB63584391BE629A507015D951 Ref B: HEL01EDGE0917 Ref C: 2022-11-29T04:28:09Z
Cache-Control: public, max-age=1025614, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/Meetings_manifest.xml
200 OK 14 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/Meetings_manifest.xml
IP
File type XML 1.0 document text\012- XML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash f5ac330896bb993e8b21cf714be41954
d8c2fa9680baee922d0c72c1710259c37105f443
964cd1ad5bc38a20811e6e8b08e4d2823696125762c9c648aad5fc4d62480909
GET /o/s/161591341006_resources/1033/Meetings_manifest.xml HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 14378
Content-Type: text/xml
Content-Encoding: gzip
Last-Modified: Mon, 21 Nov 2022 11:03:42 GMT
Accept-Ranges: bytes
ETag: "03b96ea98fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: f69a3543-ccca-4357-b674-f393f74f3b6f
X-UserSessionId: f69a3543-ccca-4357-b674-f393f74f3b6f
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B55
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B55
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 233A32543FBA41B4B90D94A45E65876F Ref B: HEL01EDGE0720 Ref C: 2022-11-29T06:18:06Z
Cache-Control: public, max-age=1032138, immutable
Date: Thu, 01 Dec 2022 07:35:18 GMT
Connection: keep-alive
Vary: Accept-Encoding
onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151
403 Forbidden 1.2 kB URL HTTP/2 onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D%21104&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH%5FgeGGRSgaVcwjpuyulg0D8%2DM3G4hl935NpURgZ4%2DjqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw%2Dx6H6jpw&access_token_ttl=1671694512151 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-OfficeVersion: 16.0.15913.41006
X-WacCluster: PNL1
X-WacFrontEnd: AM4PEPF00006B55
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: LPkbPgPBGZzDe4jWNyTonczai4+r9exaeOTWe3Mfg00=,638054769132732492
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 70f6d43c-7f76-4f41-8444-81220e1e865a
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006957
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-officefd: AM4PEPF00006957
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 81871785E3D94E22A914A2B2D5AC1016 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:18Z
date: Thu, 01 Dec 2022 07:35:18 GMT
X-Firefox-Spdy: h2
c.live.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&MUID=263D5AB969F1669A0F3648D46DF16211
200 OK 42 B URL HTTP/2 c.live.com/c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&MUID=263D5AB969F1669A0F3648D46DF16211
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?DI=15347&wlxid=eed32c72-e391-4b35-bb80-ebbc0489834f&reqid=002f7f78b36&csiperf=ANON%3D%26NL%3D0%26TP%3D0%26CL%3DRD00155D99A0D3%26MA%3Den-US%26B%3D0.0.0%26TR%3DNA%252ANA%252A%253ASDX.Skydrive%252AWac.view.F.U.%26PLT%3D5907%26IR%3D1%26EX%3D0%26L.h%3D1336%26L.bc%3D1590%26L.ac%3D1590%26L.f%3D1605%26L.sjs%3D5802%26L.ttg%3D4138%26C.st%3D1669880109767%26N.jsPlt%3D3159%26N.domIn%3D1604%26N.req%3D1082%26N.resp%3D4%26N.navType%3D255%26N.redirectCount%3D0&r=0.69938596342406&CtsSyncId=CF0744B5500E4A5BB25EB57673253E6F&MUID=263D5AB969F1669A0F3648D46DF16211 HTTP/1.1
Host: c.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Connection: keep-alive
Cookie: SM=T; MUID=263D5AB969F1669A0F3648D46DF16211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=C; domain=c.live.com; path=/; SameSite=None; Secure;
ANONCHK=0; domain=c.live.com; expires=Thu, 01-Dec-2022 07:45:18 GMT; path=/; SameSite=None; Secure;
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 42
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 0 B URL HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onenote.officeapps.live.com/
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://onenote.officeapps.live.com
Date: Thu, 01 Dec 2022 07:35:18 GMT
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
X-UserSessionId: 82c106e3-83bb-422e-9394-c23e4736f6be
X-BrowserUlsBeacon: [{"Index":8,"MsSinceStart":5603,"Value":"SessionExited","Type":"SessionBoundary"}]
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5f2f1622-e29e-4fd0-96dd-4ee4080b918a
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 19BA282DD67E4EFF8B28B1007A545E50 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:18Z
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False
200 OK 1.4 kB URL HTTP/2 onedrive.live.com/handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (3359)
Hash b35b7ed6f895e5cb92ff41fe72bc8311
aa05402e9141bec011a58ccaa188fa9f8af012bd
296b43bf67346f1e4acadba6cf401b8b0ff2e705a9d0ece698933994f696598a
GET /handlers/clientstring.mvc?mkt=en-US&group=GroupFolders&v=19.773.0927.2003&useRequiresJs=False HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/view.aspx?resid=C1F2B4CF865ED96D!104&wdo=2&authkey=!ALWZYoSaz6lCtLg
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:rOUulG7T2og=:31p+mTu/3FdBig+LEvppXJhWOxNx9QdgLTeBL/zdNJg=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=2; wla42=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 07:35:12 GMT
vary: Accept-Encoding
set-cookie: mkt=en-US; domain=.live.com; expires=Fri, 01-Dec-2023 00:00:00 GMT; path=/
xidseq=3; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 01-Dec-2022 05:55:12 GMT; path=/
E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; domain=.live.com; path=/
wla42=; domain=live.com; expires=Thu, 08-Dec-2022 07:35:12 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D99952D
x-odwebserver: eastus1-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 014D63CAF0E74992BD045151E66ABD46 Ref B: OSL30EDGE0221 Ref C: 2022-12-01T07:35:12Z
date: Thu, 01 Dec 2022 07:35:12 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
200 OK 9 B URL HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 2268d13420e0aa0f9b66cb5d019739a7
662a004fc2f4b8d7aac6e1a6edbe0c591e131e5a
58eebbad8ea42cacd6321e80025b549352a7a2daf27795459c8d8f01164178ce
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 6490
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1424
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Thu, 01 Dec 2022 07:35:18 GMT
onenote.officeapps.live.com/o/WsaUpload.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
200 OK 122 B URL HTTP/2 onenote.officeapps.live.com/o/WsaUpload.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 70e60f5f836a088eb0751a811278f36a
5f87eb2b1abd72fc8b225f9e54f346738622e5d8
fa01a9d7f4029c2554bf4d72f162da9d2da5342986319818b60b6c176902298e
POST /o/WsaUpload.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Content-Type: text/plain;charset=UTF-8
Content-Length: 6382
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 7ae272a3-ba8e-44b9-bd3a-5387e0658890
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: BD71526101304D1D9011E4688CF18C4C Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:19Z
date: Thu, 01 Dec 2022 07:35:18 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 10 B URL HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 647559178e46038782ffa07d589479d6
ec024e02494c63c58095573a6aa701fa33b624d0
cea0acd1f20f9d6e71b34b637a94b29304c507ea1e40264c0aab70aeb5746933
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.4
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,86258c80efed47d9b34bf77fc663b381-af82a060-b49f-448b-baf0-956ba7709592-7634,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063
upload-time: 1669880117241
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 20190
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 10
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1783
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Thu, 01 Dec 2022 07:35:18 GMT
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Content-Type: text/plain;charset=UTF-8
Content-Length: 59413
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: eb2db3fd-0eeb-461d-9921-7ae1ed46b61f
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000695D
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-buls-suppressedtags: 378069,1671813,2209344,3249545,3290144,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159499,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000695D
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 5245E3BE869F4A6EB97EEC4CF27DA109 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:19Z
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 0
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.15913.41006&waccluster=PNL1&usid=82c106e3-83bb-422e-9394-c23e4736f6be&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&haep=1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Content-Type: text/plain;charset=UTF-8
Content-Length: 6968
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0e67e5ef-adc3-4034-af28-99226a5f5814
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006960
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-buls-suppressedtags: 378069,1671813,2209344,3249545,3290144,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159499,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006960
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 263AF81839074B1B84587396B7B54EBB Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:19Z
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 0
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/moeerrorux.css
200 OK 1.5 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/moeerrorux.css
IP
File type ASCII text, with CRLF line terminators
Hash 8ad234d7002b31c549841c86ca238a4c
dacd78b2a5e4a093b4e4923032ef468cdabf9f4d
3a3c28e5472736b539e729341cbc5fa6dc92166ee8978ff85d2e766863c4786c
GET /o/s/161591341006_resources/1033/moeerrorux.css HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1475
Content-Type: text/css
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 10:16:10 GMT
Accept-Ranges: bytes
ETag: "70fdd94692fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 87b9da50-8b43-4ae6-a5cb-8eeecdacb03e
X-UserSessionId: 87b9da50-8b43-4ae6-a5cb-8eeecdacb03e
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695D
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0000695D
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 3873EE3C35D24947B7F290D252E6118F Ref B: HEL01EDGE0417 Ref C: 2022-11-29T04:28:22Z
Cache-Control: public, max-age=1025525, immutable
Date: Thu, 01 Dec 2022 07:35:19 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
200 OK 48 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
File type ASCII text, with very long lines (44104)
Hash a273e4b2a17e2e16a580d8c11ed5e018
0b30a28853c8ebaf3f0e0bbddda9589aa807ba69
3a02e869b534743030650168c93da1608f6e4cb477f239eb154573765581543b
GET /o/s/161591341006_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 47464
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:10 GMT
Accept-Ranges: bytes
ETag: "6b149bcaa7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b46eb5f3-0799-488e-9823-42cba3113993
X-UserSessionId: b46eb5f3-0799-488e-9823-42cba3113993
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006958
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006958
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 27E4C1ACD8754453A81AE3F3219938B0 Ref B: HEL01EDGE1209 Ref C: 2022-11-30T00:54:34Z
Cache-Control: public, max-age=1099107, immutable
Date: Thu, 01 Dec 2022 07:35:19 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/moe_status_icons.png
200 OK 6.1 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/moe_status_icons.png
IP
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced\012- data
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /o/s/161591341006_resources/1033/moe_status_icons.png HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 6140
Content-Type: image/png
Last-Modified: Mon, 21 Nov 2022 12:00:24 GMT
Accept-Ranges: bytes
ETag: "6675a8d6a0fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: abef987b-b471-488f-9d35-584898ae1286
X-UserSessionId: abef987b-b471-488f-9d35-584898ae1286
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006960
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006960
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: tasmigration015,typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: B2469758269646C3A06CB3984D23ADAF Ref B: HEL01EDGE1010 Ref C: 2022-11-29T00:37:46Z
Cache-Control: public, max-age=1011759, immutable
Date: Thu, 01 Dec 2022 07:35:19 GMT
Connection: keep-alive
c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/agavedefaulticon96x96.png
200 OK 1.1 kB URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_resources/1033/agavedefaulticon96x96.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /o/s/161591341006_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1115
Content-Type: image/png
Last-Modified: Mon, 21 Nov 2022 11:03:55 GMT
Accept-Ranges: bytes
ETag: "3265af298fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: e251ee61-5fd4-4432-9fbd-44838acd34fd
X-UserSessionId: e251ee61-5fd4-4432-9fbd-44838acd34fd
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF00006B55
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006B55
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 276264CDA86E4910AFCA396300BEA1EF Ref B: HEL01EDGE1215 Ref C: 2022-11-28T10:16:01Z
Cache-Control: public, max-age=960011, immutable
Date: Thu, 01 Dec 2022 07:35:19 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/OneNote.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw&access_token_ttl=1671694511641&haep=1
200 OK 113 B URL HTTP/2 onenote.officeapps.live.com/o/OneNote.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw&access_token_ttl=1671694511641&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash a09a351adf1e71057e7c22d51ba4c1b2
062cda6a63181a78821e6f0b12d9f3d982ca7463
dfd318333069fc240da81fd6d001f087e5624fa71a170cc80ea68c92c7080423
POST /o/OneNote.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&build=16.0.15913.41006&waccluster=PNL1&WacUserType=WOPI&ckey=LPkbPgPBGZzDe4jWNyTonczai4%2Br9exaeOTWe3Mfg00%3D%2C638054769132732492&access_token=4wIo7EKfMEBMBvhCy6ffHskGG8UfPTjxi5DTkKBBgnH_geGGRSgaVcwjpuyulg0D8-M3G4hl935NpURgZ4-jqDul1BIgSGKd0K0lFwqF7sF110rckdmy14rMozNu2CKNIbFyF6EMekpGo6Mw-x6H6jpw&access_token_ttl=1671694511641&haep=1 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
Content-Type: text/plain;charset=UTF-8
Content-Length: 487
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 113
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2815a779-88b3-46c0-b618-f545526a8fcc
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006B55
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006B55
x-wacfrontend: AM4PEPF00006B55
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9F8765C83D184627A1F4E6DD8EB92432 Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:18Z
date: Thu, 01 Dec 2022 07:35:18 GMT
X-Firefox-Spdy: h2
onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=82c106e3-83bb-422e-9394-c23e4736f6be&officeserverversion=16.0.15930.41009 HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 628
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; BP=l=SDX.Skydrive&FR=&ST=; MUID=263D5AB969F1669A0F3648D46DF16211; ShCLSessionID=1669880116598_0.7893481707841447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 90ed6006-a2f6-4423-9cd5-6d75b1971982
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF00006022
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 95AF8A3B3DE9A8BF68A3438E94608B6EE0497A21
x-buls-suppressedtags: 378069,1671813,2209344,3249545,3290144,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,17085210,17085216,17162522,17358857,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37288035,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50619726,50622685,50622687,51451613,51492170,51504083,51667010,306230939,306978834,510252435,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159499,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF00006022
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: E95B4EB61958473488B559A0915D888F Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:19Z
date: Thu, 01 Dec 2022 07:35:18 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?resid=C1F2B4CF865ED96D!104&authkey=!ALWZYoSaz6lCtLg&e=PZWuru
200 OK 0 B URL HTTP/2 onedrive.live.com/redir?resid=C1F2B4CF865ED96D!104&authkey=!ALWZYoSaz6lCtLg&e=PZWuru
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /redir?resid=C1F2B4CF865ED96D!104&authkey=!ALWZYoSaz6lCtLg&e=PZWuru HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:UxLZk27T2og=:7asOYI+EsMugE6kNj+y/Vj5S/8NZBZz1t8EMtvrv1dw=:F; domain=.live.com; path=/
xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 01-Dec-2022 05:55:10 GMT; path=/
wla42=; domain=live.com; expires=Thu, 08-Dec-2022 07:35:10 GMT; path=/
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D99A0D3
x-odwebserver: eastus1-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 51EE77959B084F419CC4285253679EFE Ref B: OSL30EDGE0221 Ref C: 2022-12-01T07:35:10Z
date: Thu, 01 Dec 2022 07:35:10 GMT
X-Firefox-Spdy: h2
onedrive.live.com/view.aspx?resid=C1F2B4CF865ED96D!104&wdo=2&authkey=!ALWZYoSaz6lCtLg
200 OK 0 B URL HTTP/2 onedrive.live.com/view.aspx?resid=C1F2B4CF865ED96D!104&wdo=2&authkey=!ALWZYoSaz6lCtLg
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /view.aspx?resid=C1F2B4CF865ED96D!104&wdo=2&authkey=!ALWZYoSaz6lCtLg HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onedrive.live.com/redir?resid=C1F2B4CF865ED96D!104&authkey=!ALWZYoSaz6lCtLg&e=PZWuru
Cookie: MSFPC=GUID=2b12c4928f2f4c0a932dbc143a0bc267&HASH=2b12&LV=202205&V=4&LU=1653986466960; E=P:UxLZk27T2og=:7asOYI+EsMugE6kNj+y/Vj5S/8NZBZz1t8EMtvrv1dw=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=1; wla42=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:rOUulG7T2og=:31p+mTu/3FdBig+LEvppXJhWOxNx9QdgLTeBL/zdNJg=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 01-Dec-2022 05:55:11 GMT; path=/
wla42=; domain=live.com; expires=Thu, 08-Dec-2022 07:35:12 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: RD00155D99A0D3
x-odwebserver: eastus1-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7A8DE3E2E21848F98FC879909D301003 Ref B: OSL30EDGE0221 Ref C: 2022-12-01T07:35:11Z
date: Thu, 01 Dec 2022 07:35:11 GMT
X-Firefox-Spdy: h2
c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/osfruntime_ono.js
200 OK 0 B URL HTTP/1.1 c1-onenote-15.cdn.office.net/o/s/161591341006_App_Scripts/osfruntime_ono.js
IP
GET /o/s/161591341006_App_Scripts/osfruntime_ono.js HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onenote.officeapps.live.com
Connection: keep-alive
Referer: https://onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 120837
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Mon, 21 Nov 2022 12:50:33 GMT
Accept-Ranges: bytes
ETag: "a1463d8a7fdd81:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 5ee6b59f-37e3-4da0-95c2-446472b51fb7
X-UserSessionId: 5ee6b59f-37e3-4da0-95c2-446472b51fb7
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
X-OfficeFE: AM4PEPF00006957
X-OfficeVersion: 16.0.15913.41006
X-OfficeCluster: PNL1
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF00006957
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 437AD360A02B49969EFF141EAA7C3CBF Ref B: HEL01EDGE1014 Ref C: 2022-11-29T14:57:32Z
Cache-Control: public, max-age=1063284, immutable
Date: Thu, 01 Dec 2022 07:35:17 GMT
Connection: keep-alive
onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
200 OK 0 B URL HTTP/2 onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
POST /o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=pDuuRSfHbUCq2BgrahDH%2FQ.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FC1F2B4CF865ED96D!104&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=OneDrive&wdorigin=Other&wdhostclicktime=1669880109767&jsapi=1&jsapiver=v1&newsession=1&corrid=82c106e3-83bb-422e-9394-c23e4736f6be&usid=82c106e3-83bb-422e-9394-c23e4736f6be&sftc=1&readonly=1&wdredirectionreason=Force_SingleStepBoot HTTP/1.1
Host: onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 1386
Origin: https://onedrive.live.com
Connection: keep-alive
Cookie: E=P:+G8LlW7T2og=:+QH9nhMCuwMbkfB47IwsK6u0MsdEbkut8kLDtUY4AxY=:F; xid=eed32c72-e391-4b35-bb80-ebbc0489834f&&RD00155D99A0D3&385; xidseq=3; wla42=; mkt=en-US
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 82c106e3-83bb-422e-9394-c23e4736f6be
x-usersessionid: 82c106e3-83bb-422e-9394-c23e4736f6be
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: Av/V1OIQEg1NnsGePStscuk3wq4vcXOXMgC9FgVS6qT/EXVQYN3Od6vRI1SBm0VaYGTtWDP/tGvfx2YqK9SDWlYAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNjcyNTMxMTk5fQ==
origin-agent-cluster: ?1
x-officefe: AM4PEPF00006B55
x-officeversion: 16.0.15913.41006
x-officecluster: PNL1
x-content-type-options: nosniff
content-security-policy-report-only: font-src data: c1-onenote-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net c1-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net c1-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net c1-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net c1-officeapps-15.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-1.cdn.office.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; media-src *.skype.com *.skypeassets.com 'self' *; object-src 'self' *; child-src blob: * onenote:; worker-src blob: *; img-src * data: blob:; report-uri /o/reportcsp.ashx
document-policy: js-profiling
x-officefd: AM4PEPF00006B55
x-wacfrontend: AM4PEPF00006B55
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: CFF69BB39ECB4A7C921810AFB906A13D Ref B: SVG20EDGE0408 Ref C: 2022-12-01T07:35:13Z
date: Thu, 01 Dec 2022 07:35:12 GMT
X-Firefox-Spdy: h2
13.107.42.12
93.184.220.29
95.101.10.88
13.69.239.72
13.95.147.73
104.18.24.243
23.13.246.185