{"report_id":"889e2cdb-ef7e-4e7d-b9e0-8c4a05a4ea5c","version":0,"status":"done","tags":[],"date":"2026-10-09T21:40:10Z","url":{"schema":"https","addr":"orrick.sharepoint.com/sites/OrrickTax-22085","fqdn":"orrick.sharepoint.com","domain":"sharepoint.com","tld":"com"},"ip":{"addr":"13.107.136.10","port":0,"asn":8075,"as":"Microsoft Corporation","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"title":"Sign in to your account","dom":{"size":64741,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47360)","md5":"c3ce34f025e60b3dd6f3efcb2ba03bbc","sha1":"186509825baf95d765a08da37ddd31658118a774","sha256":"5d60eb312ffd5e21d8d7288c31b9c8d125f2defac58dfc6fac99821e5e0b866b","sha512":"979a733038d177f8be58baa93b0d0f7b67708cedf3988edeb69d71cc00071e08d9cdcd2ea8f9412e6ae96a8109a159f00a45907616b846dd045a961fc5b5523a","ssdeep":"1536:FvE8GLG2QPDilpr8rUWqW9WZ9Tjuokmap5vPoMhuft:FE85Olpg4FWCa/AZ","tlshash":"c8537ea67b84383bc7825975c0af77079e3d69635898cc88f4ddc48c0db9bea5623607","dom_hash":"domhash15086c0a41bb8407a5e7e08b46b82572","first_seen":"2026-10-09T21:40:13.056928Z","last_seen":"2026-10-09T21:40:13.056928Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"orrick.sharepoint.com/sites/OrrickTax-22085","fqdn":"orrick.sharepoint.com","domain":"sharepoint.com","tld":"com"},"ip":{"addr":"13.107.136.10","port":0,"asn":8075,"as":"Microsoft Corporation","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T21:40:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"orrick.sharepoint.com","ip":{"addr":"13.107.136.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1998-08-10","domain_rank":0,"first_seen":"2026-10-09T21:40:11.218555Z","last_seen":"2026-10-09T21:40:11.218555Z","alert_count":0,"request_count":3,"received_data":8715,"sent_data":1805,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27723","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"login.microsoftonline.com","ip":{"addr":"40.126.53.17","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"domain_registered":"2002-07-09","domain_rank":52,"first_seen":"2017-02-19T08:06:40Z","last_seen":"2026-10-05T13:35:13.455537Z","alert_count":0,"request_count":1,"received_data":70363,"sent_data":2455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-10-25","domain_rank":5248,"first_seen":"2018-11-19T10:50:03Z","last_seen":"2026-10-07T21:29:34.350033Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":2293,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"orrick.sharepoint.com/sites/OrrickTax-22085/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FOrrickTax%2D22085","fqdn":"orrick.sharepoint.com","domain":"sharepoint.com","tld":"com"},"ip":{"addr":"13.107.136.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T21:39:31.547Z","timestamp":1791581971547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sharepoint.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 23 Jan 2026 18:52:20 GMT","end":"Mon, 18 Jan 2027 18:52:20 GMT"},"fingerprint":{"sha1":"FA:54:FC:7E:DE:2C:B3:74:F4:96:8E:36:A7:3D:95:41:D0:19:13:5F","sha256":"7D:5F:B5:F1:81:82:2E:EF:84:1A:3E:7B:14:8C:44:D4:E0:9C:DD:D8:27:76:02:46:17:8B:35:09:50:7F:A5:B6"}}},"request":{"raw":"GET /sites/OrrickTax-22085/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FOrrickTax%2D22085 HTTP/1.1\r\nHost: orrick.sharepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncache-control: private\r\ncontent-length: 274\r\ncontent-type: text/html; charset=utf-8\r\nlocation: /_forms/default.aspx?ReturnUrl=%2fsites%2fOrrickTax-22085%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FOrrickTax%252D22085\u0026Source=cookie\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODU=; expires=Fri, 09-Oct-2026 21:49:31 GMT; path=/; SameSite=None; secure; HttpOnly\r\nx-networkstatistics: 0,65535,0,0,503,31413,31413,139122\r\nx-sharepointhealthscore: 0\r\nx-aspnet-version: 4.0.30319\r\nisocdi: 0\r\nx-databoundary: NONE\r\nx-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/\r\nx-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/\r\nsprequestguid: 834c43a2-50ca-f000-d061-95ad7463f6e2\r\nrequest-id: 834c43a2-50ca-f000-d061-95ad7463f6e2\r\nms-cv: okNMg8pQAPDQYZWtdGP24g.0\r\nsplogid: 834c43a2-50ca-f000-d061-95ad7463f6e2\r\nalt-svc: h3=\":443\";ma=86400\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://spo.nel.measure.office.net/api/report?tenantId=724221a9-701c-4c25-84ea-07ff9cfadc80\u0026destinationEndpoint=Edge-Prod-OSL23r5a\u0026frontEnd=AFD\u0026RemoteIP=195.64.118.0\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":7200,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nstrict-transport-security: max-age=31536000\r\nsprequestduration: 20\r\nspiislatency: 2\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27723\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 8CF361150D23452FB20B8FF0A9986823 Ref B: OSL231050213031 Ref C: 2026-10-09T21:39:31Z\r\ndate: Fri, 09 Oct 2026 21:39:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"RpsContextCookie","value":"U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODU=","quoted":false,"path":"/","expires":"2026-10-09T21:49:31Z","raw_expires":"Fri, 09-Oct-2026 21:49:31 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODU=; expires=Fri, 09-Oct-2026 21:49:31 GMT; path=/; SameSite=None; secure; HttpOnly"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27723","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orrick.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fOrrickTax-22085%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FOrrickTax%252D22085\u0026Source=cookie","fqdn":"orrick.sharepoint.com","domain":"sharepoint.com","tld":"com"},"ip":{"addr":"13.107.136.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T21:39:31.729Z","timestamp":1791581971729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sharepoint.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 23 Jan 2026 18:52:20 GMT","end":"Mon, 18 Jan 2027 18:52:20 GMT"},"fingerprint":{"sha1":"FA:54:FC:7E:DE:2C:B3:74:F4:96:8E:36:A7:3D:95:41:D0:19:13:5F","sha256":"7D:5F:B5:F1:81:82:2E:EF:84:1A:3E:7B:14:8C:44:D4:E0:9C:DD:D8:27:76:02:46:17:8B:35:09:50:7F:A5:B6"}}},"request":{"raw":"GET /_forms/default.aspx?ReturnUrl=%2fsites%2fOrrickTax-22085%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FOrrickTax%252D22085\u0026Source=cookie HTTP/1.1\r\nHost: orrick.sharepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODU=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"RpsContextCookie","value":"U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODU="}],"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 2176\r\ncontent-type: text/html; charset=utf-8\r\nexpires: -1\r\nlocation: https://login.microsoftonline.com:443/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: nSGt-CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8=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; expires=Fri, 09-Oct-2026 21:43:31 GMT; path=/; SameSite=None; secure; HttpOnly\nRpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODUmUHJldmlvdXNSZXF1ZXN0Q29ycmVsYXRpb25JZD04MzRjNDNhMiUyRDQwZDclMkRmMDAwJTJENzYzMSUyRDM3MDFkNmE5MjJjNCZSZXR1cm5Vcmw9JTJGc2l0ZXMlMkZPcnJpY2tUYXglMkQyMjA4NSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnNpdGVzJTI1MkZPcnJpY2tUYXglMjUyRDIyMDg1; expires=Fri, 09-Oct-2026 21:49:32 GMT; path=/; SameSite=None; secure; HttpOnly\r\nx-networkstatistics: 0,65535,0,0,2278,34073,34073,139065\r\nx-sharepointhealthscore: 0\r\nx-aspnet-version: 4.0.30319\r\nisocdi: 0\r\nx-databoundary: NONE\r\nx-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/\r\nx-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/\r\nsprequestguid: 834c43a2-40d7-f000-7631-3701d6a922c4\r\nrequest-id: 834c43a2-40d7-f000-7631-3701d6a922c4\r\nms-cv: okNMg9dAAPB2MTcB1qkixA.0\r\nsplogid: 834c43a2-40d7-f000-7631-3701d6a922c4\r\nalt-svc: h3=\":443\";ma=86400\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://spo.nel.measure.office.net/api/report?tenantId=724221a9-701c-4c25-84ea-07ff9cfadc80\u0026destinationEndpoint=Edge-Prod-OSL23r5a\u0026frontEnd=AFD\u0026RemoteIP=195.64.118.0\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":7200,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nstrict-transport-security: max-age=31536000\r\nsprequestduration: 288\r\nspiislatency: 0\r\ninclude-referred-token-binding-id: true\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27723\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: D30268070FCE486995E66E2D8703A075 Ref B: OSL231050213054 Ref C: 2026-10-09T21:39:31Z\r\ndate: Fri, 09 Oct 2026 21:39:31 GMT\r\n\r\n","headers":null,"cookies":[{"name":"nSGt-CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8","value":"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","quoted":false,"path":"/","expires":"2026-10-09T21:43:31Z","raw_expires":"Fri, 09-Oct-2026 21:43:31 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"nSGt-CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8=gYMwM0YwN0RCOTRDNTQ1MTY2MTRCNzEzMERGQ0QwQ0EwMjUxRTQwM0FBNkMxOThCQjQ3MENENDBGNkJDNEU1RTZBQjJBMzU0M0YyRTZCRkRBQUY1MEM2NjU3QUY2RDQwNjRGOBIxMzQzNjA1NTgxMTg2MjQ4MjQVb3JyaWNrLnNoYXJlcG9pbnQuY29tBjE5MzY3MBs4UWZXb2I2LXd1WXVNQ1JvQ0dIeW02eW5UMWsI2JbKkKwSIq3Xq5J+7ious4/JdFkzUCH1qhKPIEc0UQmvBSwJg4RZP03bF0my7JvsA/HMf0rxfrgesTAv3FPKXbGAsOZreAT5tEbe1Jm6Cgh/vX7GCS6U7tKBb32eijkSaAzg8husBy2O1JIMq5bj8pOJg3mA6USt2Xt8QhOqg8YlBj3zlajMvrY82dhmHdOczhE87fF3K9X8tlIiZVdCnH/gSynEj+2IkUkoPDiB/V0gXTWTkEhKXggakB42W4YH7vIUYJ1NSxA0O9zPqS+jhsPxWG9xuSbbX4l7A7hdB7kYrNKES5lr/Qu6g5x7vm/0omJ6OP1DYq/0495GG+ZOsAAAAA==; expires=Fri, 09-Oct-2026 21:43:31 GMT; path=/; SameSite=None; secure; HttpOnly"},{"name":"RpsContextCookie","value":"U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODUmUHJldmlvdXNSZXF1ZXN0Q29ycmVsYXRpb25JZD04MzRjNDNhMiUyRDQwZDclMkRmMDAwJTJENzYzMSUyRDM3MDFkNmE5MjJjNCZSZXR1cm5Vcmw9JTJGc2l0ZXMlMkZPcnJpY2tUYXglMkQyMjA4NSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnNpdGVzJTI1MkZPcnJpY2tUYXglMjUyRDIyMDg1","quoted":false,"path":"/","expires":"2026-10-09T21:49:32Z","raw_expires":"Fri, 09-Oct-2026 21:49:32 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGT3JyaWNrVGF4JTJEMjIwODUmUHJldmlvdXNSZXF1ZXN0Q29ycmVsYXRpb25JZD04MzRjNDNhMiUyRDQwZDclMkRmMDAwJTJENzYzMSUyRDM3MDFkNmE5MjJjNCZSZXR1cm5Vcmw9JTJGc2l0ZXMlMkZPcnJpY2tUYXglMkQyMjA4NSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnNpdGVzJTI1MkZPcnJpY2tUYXglMjUyRDIyMDg1; expires=Fri, 09-Oct-2026 21:49:32 GMT; path=/; SameSite=None; secure; HttpOnly"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft SharePoint:16.0.0.27723","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","fqdn":"login.microsoftonline.com","domain":"microsoftonline.com","tld":"com"},"ip":{"addr":"40.126.53.17","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T21:39:32.210Z","timestamp":1791581972210,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stamp2.login.microsoftonline.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 08 Sep 2026 17:50:32 GMT","end":"Thu, 17 Dec 2026 16:50:32 GMT"},"fingerprint":{"sha1":"94:D2:3D:11:ED:B9:4E:87:06:65:95:00:84:9A:6C:42:D9:7C:38:0C","sha256":"2E:CC:85:F6:4C:CC:5D:1C:A8:F5:6A:ED:21:6A:33:63:A3:0F:27:A2:15:B4:36:DF:7F:55:7F:66:8F:87:7C:25"}}},"request":{"raw":"GET /783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4 HTTP/1.1\r\nHost: login.microsoftonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nExpires: -1\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nCross-Origin-Opener-Policy-Report-Only: same-origin; report-to=\"coop-endpoint\"\r\nReporting-Endpoints: coop-endpoint=\"https://coop.msauth.net:443/api/coopReport?client_type=none-none\u0026client_id=00000003-0000-0ff1-ce00-000000000000\u0026correlation_id=834c43a2-40d7-f000-7631-3701d6a922c4\u0026is1p=1\"\r\nLink: \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch,\u003chttps://aadcdn.msftauth.net\u003e; rel=dns-prefetch\r\nX-DNS-Prefetch-Control: on\r\nP3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nx-ms-request-id: cfbdc025-01c0-4425-a2ef-99740a510c00\r\nx-ms-ests-server: 2.1.25338.4 - NCUS ProdSlices\r\nx-ms-srs: 1.P\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-OEVpsJM8-UE7t1AmwTGKQA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All\r\nX-XSS-Protection: 0\r\nSet-Cookie: buid=1.AVgACKc6eBJhp0K4VccpbuMbiwMAAAAAAPEPzgAAAAAAAAAAAABYAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAzNUNG1-ds_lECz6ljQUfbgESdS0rSCPfUrOfWBMhdE9Y3-taokrp-P2aHvOBfYabY4EMRSb1SRu5YDNgHyeC2LFk5GAggcIAMG_yLQhIyXCYBo7Su0IEbbipIYuIHcnyIuVtHOx_Dj79OR3OQGZSFHNmG5AuHpzsTd89UqSOm8YwffvsprQM_c8V9ueMpBBVIGdA6tppA5cEM7nmEzR7RWukhQXriwYQeMc0NG737wBE37LNCUzmArJkTpBND3Q9FsBL8mVwCK2pMghY7c-3PtqmJH5WbfO-NNTYfO8vHA7LHZ8YTQEe7w8Juf1fhZ6t1dNAE6D3d3pSgMSoYDVT6ypo9UjbJ3wYf1Bcc9tUUwn-tRzTIPuauL2eT89yEwvUrtxRB2YrEcDhCZ3d6KHq5mat1-J5jol8utZr4MttqxDo8ENOuoLYXm77JOVxLJ29wc0AIPRLlOoPNYhQPwORXlPzzyetlV-U4dvRb7eP8c00VqMrniJzGwQXd0mALjrIDEskGN4GZP-Gx9qAN8IvA0RHTM7l6gWkXv_zc0XpW-LOXwAGCEoNhAOllEbux2wP-cFD29HWBbCZE5jX0WwnE4m-0WtIp_-xcWtX_mjmVlRR1i3qPOs15xwaunUg2RMjvtaHhCwmcvlw2hbHgKTiOHKpRTr4PWNEu1VKd1eZDS0gAA; expires=Sun, 08-Nov-2026 21:39:34 GMT; path=/; secure; HttpOnly; SameSite=None\nesctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAJ4zD8mSamUdm2z-rePiWYY7IjZnOXRhLpBB0G12jG5uNPH-gMju5hrgbpHPZYYleMJPd2fLms1JUd93NCl2kJiIeWIytcGgwUwWNEWCWZX2rEUNlHxyidD3jVnWPCbwElIBxG8FtlqNAWNUoDOGrdzCC8JwRaCLssQxI0GOhsaxYGnl-mBSX93oW1_ZRYALjeXhJ7CmSe3Cwq1sMhksxj_pePtJiQuWbmuUXgeyJ-M6EigDTphoYe4Nk_-lJewiHDByHBEX9k_gUqeWTmLmFdke_9rOzzCC1HRPXC8cCVo-QZ1KYA0tCfKqzUg7YHOnG6S7zai82-qGq4zA8T6hAFRbyoLztb5Is7MdrapV508Lintgk66y9mWMxapAMWd_FVPAM4YixfPCNQbsC1kUtcYiZngGypB6n61ArrWEkByiGiqfWSR6Ja_itUI1n1mtxp1ub4oEpabn-sTFHdw1zgqcNahC3--M-ryWTbCdFdIASVwB6QtdTBv7mp8o1XOIlM-7_ZfwQMK0X34cbQtk25EHUd-uvxNOCmagxyf02CnwkOMAlxyrdAt32QmB73bDPLTia9rRiz7SPAUqZ-JUuIyU1HEBd_r-o9c_DpqoGDSDFqPWv8wEa92EcQ9m5M7p91JwtPvaI2JLGDL7yFAMrPNB7G8UcTQWGDpj6eDlbl_ldL-jnXmtOFK-3gNXYPtOlfIPMNCwZrqEzN2onfqloW3Iy_k5us5HwSMJmLDHoeqwgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nesctx-tyrk7HjtZk=BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAA8w1xkmqTBW56Q9IiMNf14ZWgfMj_JvkHPhGeR0IudatHPikIQnStyTtQSYBiSlfmsOd0MaBoQOnInPi-6X1Kd1Rr7ak03fKT1k8miaA7yS4D823g3L1JEgPRm13kx1BO1scQQgmnvmakkj7By_842IEI73-QQe-H8cg4u4Fhnn8XzQd2bXFAzkJN0U94qV2q-NLahQcWfF8S3zcHU7EscE6Uf5XfMT1bbBg3cVb7Qx7dWYS6Ke5dSjactCjkZQhwdWLMit7xTu4ylagBrwo0Sjdhs2CR3U7IREidKEhENasjFeMurNTPhm8H2BUjHF95nptyY1hn5CmJkWI1Hrtxa2eCuFVZdU1tqArDJ_tZhkLYgcftiMCz8-a0gAentzESYkkhbDwVvsxJzzwWT5rF8bWV9_pzQqBdhps0Xj_Ji529JRR39-f9a5vDIZAhcxgc-ODnbG6jrFnDfOSFoB-5AVsSah2Y1I8Hi0XcwXhNbcu1JXqmSuMjhJNl3LSOP4jioDaBMlugr9g7affnrb1Fq5JTB0SLF3IfAEzn6JViNXJbyFpFHf9BGJD0ybDDYB8JpsfsAvCMrOxshnyfcVFLZicMliGquX6R-ThbYM7xgeOSdQWCsM1pVW2RlYzxH_FavDm0-CY1d08dsYdWr1n91u8R6q3U8Tyw11aLodq1LLXuYTwbJKIonj-fqBo3QLDIAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None\nfpc=Aj_sE84ZGrBFtJ9xy-XpPHGxHdxzAQAAABZWW-IOAAAA; expires=Sun, 08-Nov-2026 21:39:34 GMT; path=/; secure; HttpOnly; SameSite=None\nx-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly\nstsservicecookie=estsfd; path=/; secure; samesite=none; httponly\r\nDate: Fri, 09 Oct 2026 21:39:34 GMT\r\nContent-Length: 29082\r\n\r\n","headers":null,"cookies":[{"name":"buid","value":"1.AVgACKc6eBJhp0K4VccpbuMbiwMAAAAAAPEPzgAAAAAAAAAAAABYAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAzNUNG1-ds_lECz6ljQUfbgESdS0rSCPfUrOfWBMhdE9Y3-taokrp-P2aHvOBfYabY4EMRSb1SRu5YDNgHyeC2LFk5GAggcIAMG_yLQhIyXCYBo7Su0IEbbipIYuIHcnyIuVtHOx_Dj79OR3OQGZSFHNmG5AuHpzsTd89UqSOm8YwffvsprQM_c8V9ueMpBBVIGdA6tppA5cEM7nmEzR7RWukhQXriwYQeMc0NG737wBE37LNCUzmArJkTpBND3Q9FsBL8mVwCK2pMghY7c-3PtqmJH5WbfO-NNTYfO8vHA7LHZ8YTQEe7w8Juf1fhZ6t1dNAE6D3d3pSgMSoYDVT6ypo9UjbJ3wYf1Bcc9tUUwn-tRzTIPuauL2eT89yEwvUrtxRB2YrEcDhCZ3d6KHq5mat1-J5jol8utZr4MttqxDo8ENOuoLYXm77JOVxLJ29wc0AIPRLlOoPNYhQPwORXlPzzyetlV-U4dvRb7eP8c00VqMrniJzGwQXd0mALjrIDEskGN4GZP-Gx9qAN8IvA0RHTM7l6gWkXv_zc0XpW-LOXwAGCEoNhAOllEbux2wP-cFD29HWBbCZE5jX0WwnE4m-0WtIp_-xcWtX_mjmVlRR1i3qPOs15xwaunUg2RMjvtaHhCwmcvlw2hbHgKTiOHKpRTr4PWNEu1VKd1eZDS0gAA","quoted":false,"path":"/","expires":"2026-11-08T21:39:34Z","raw_expires":"Sun, 08-Nov-2026 21:39:34 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"buid=1.AVgACKc6eBJhp0K4VccpbuMbiwMAAAAAAPEPzgAAAAAAAAAAAABYAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAzNUNG1-ds_lECz6ljQUfbgESdS0rSCPfUrOfWBMhdE9Y3-taokrp-P2aHvOBfYabY4EMRSb1SRu5YDNgHyeC2LFk5GAggcIAMG_yLQhIyXCYBo7Su0IEbbipIYuIHcnyIuVtHOx_Dj79OR3OQGZSFHNmG5AuHpzsTd89UqSOm8YwffvsprQM_c8V9ueMpBBVIGdA6tppA5cEM7nmEzR7RWukhQXriwYQeMc0NG737wBE37LNCUzmArJkTpBND3Q9FsBL8mVwCK2pMghY7c-3PtqmJH5WbfO-NNTYfO8vHA7LHZ8YTQEe7w8Juf1fhZ6t1dNAE6D3d3pSgMSoYDVT6ypo9UjbJ3wYf1Bcc9tUUwn-tRzTIPuauL2eT89yEwvUrtxRB2YrEcDhCZ3d6KHq5mat1-J5jol8utZr4MttqxDo8ENOuoLYXm77JOVxLJ29wc0AIPRLlOoPNYhQPwORXlPzzyetlV-U4dvRb7eP8c00VqMrniJzGwQXd0mALjrIDEskGN4GZP-Gx9qAN8IvA0RHTM7l6gWkXv_zc0XpW-LOXwAGCEoNhAOllEbux2wP-cFD29HWBbCZE5jX0WwnE4m-0WtIp_-xcWtX_mjmVlRR1i3qPOs15xwaunUg2RMjvtaHhCwmcvlw2hbHgKTiOHKpRTr4PWNEu1VKd1eZDS0gAA; expires=Sun, 08-Nov-2026 21:39:34 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"esctx","value":"PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAJ4zD8mSamUdm2z-rePiWYY7IjZnOXRhLpBB0G12jG5uNPH-gMju5hrgbpHPZYYleMJPd2fLms1JUd93NCl2kJiIeWIytcGgwUwWNEWCWZX2rEUNlHxyidD3jVnWPCbwElIBxG8FtlqNAWNUoDOGrdzCC8JwRaCLssQxI0GOhsaxYGnl-mBSX93oW1_ZRYALjeXhJ7CmSe3Cwq1sMhksxj_pePtJiQuWbmuUXgeyJ-M6EigDTphoYe4Nk_-lJewiHDByHBEX9k_gUqeWTmLmFdke_9rOzzCC1HRPXC8cCVo-QZ1KYA0tCfKqzUg7YHOnG6S7zai82-qGq4zA8T6hAFRbyoLztb5Is7MdrapV508Lintgk66y9mWMxapAMWd_FVPAM4YixfPCNQbsC1kUtcYiZngGypB6n61ArrWEkByiGiqfWSR6Ja_itUI1n1mtxp1ub4oEpabn-sTFHdw1zgqcNahC3--M-ryWTbCdFdIASVwB6QtdTBv7mp8o1XOIlM-7_ZfwQMK0X34cbQtk25EHUd-uvxNOCmagxyf02CnwkOMAlxyrdAt32QmB73bDPLTia9rRiz7SPAUqZ-JUuIyU1HEBd_r-o9c_DpqoGDSDFqPWv8wEa92EcQ9m5M7p91JwtPvaI2JLGDL7yFAMrPNB7G8UcTQWGDpj6eDlbl_ldL-jnXmtOFK-3gNXYPtOlfIPMNCwZrqEzN2onfqloW3Iy_k5us5HwSMJmLDHoeqwgAA","quoted":false,"path":"/","domain":".login.microsoftonline.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAJ4zD8mSamUdm2z-rePiWYY7IjZnOXRhLpBB0G12jG5uNPH-gMju5hrgbpHPZYYleMJPd2fLms1JUd93NCl2kJiIeWIytcGgwUwWNEWCWZX2rEUNlHxyidD3jVnWPCbwElIBxG8FtlqNAWNUoDOGrdzCC8JwRaCLssQxI0GOhsaxYGnl-mBSX93oW1_ZRYALjeXhJ7CmSe3Cwq1sMhksxj_pePtJiQuWbmuUXgeyJ-M6EigDTphoYe4Nk_-lJewiHDByHBEX9k_gUqeWTmLmFdke_9rOzzCC1HRPXC8cCVo-QZ1KYA0tCfKqzUg7YHOnG6S7zai82-qGq4zA8T6hAFRbyoLztb5Is7MdrapV508Lintgk66y9mWMxapAMWd_FVPAM4YixfPCNQbsC1kUtcYiZngGypB6n61ArrWEkByiGiqfWSR6Ja_itUI1n1mtxp1ub4oEpabn-sTFHdw1zgqcNahC3--M-ryWTbCdFdIASVwB6QtdTBv7mp8o1XOIlM-7_ZfwQMK0X34cbQtk25EHUd-uvxNOCmagxyf02CnwkOMAlxyrdAt32QmB73bDPLTia9rRiz7SPAUqZ-JUuIyU1HEBd_r-o9c_DpqoGDSDFqPWv8wEa92EcQ9m5M7p91JwtPvaI2JLGDL7yFAMrPNB7G8UcTQWGDpj6eDlbl_ldL-jnXmtOFK-3gNXYPtOlfIPMNCwZrqEzN2onfqloW3Iy_k5us5HwSMJmLDHoeqwgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None"},{"name":"esctx-tyrk7HjtZk","value":"BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAA8w1xkmqTBW56Q9IiMNf14ZWgfMj_JvkHPhGeR0IudatHPikIQnStyTtQSYBiSlfmsOd0MaBoQOnInPi-6X1Kd1Rr7ak03fKT1k8miaA7yS4D823g3L1JEgPRm13kx1BO1scQQgmnvmakkj7By_842IEI73-QQe-H8cg4u4Fhnn8XzQd2bXFAzkJN0U94qV2q-NLahQcWfF8S3zcHU7EscE6Uf5XfMT1bbBg3cVb7Qx7dWYS6Ke5dSjactCjkZQhwdWLMit7xTu4ylagBrwo0Sjdhs2CR3U7IREidKEhENasjFeMurNTPhm8H2BUjHF95nptyY1hn5CmJkWI1Hrtxa2eCuFVZdU1tqArDJ_tZhkLYgcftiMCz8-a0gAentzESYkkhbDwVvsxJzzwWT5rF8bWV9_pzQqBdhps0Xj_Ji529JRR39-f9a5vDIZAhcxgc-ODnbG6jrFnDfOSFoB-5AVsSah2Y1I8Hi0XcwXhNbcu1JXqmSuMjhJNl3LSOP4jioDaBMlugr9g7affnrb1Fq5JTB0SLF3IfAEzn6JViNXJbyFpFHf9BGJD0ybDDYB8JpsfsAvCMrOxshnyfcVFLZicMliGquX6R-ThbYM7xgeOSdQWCsM1pVW2RlYzxH_FavDm0-CY1d08dsYdWr1n91u8R6q3U8Tyw11aLodq1LLXuYTwbJKIonj-fqBo3QLDIAA","quoted":false,"path":"/","domain":".login.microsoftonline.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx-tyrk7HjtZk=BgABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAA8w1xkmqTBW56Q9IiMNf14ZWgfMj_JvkHPhGeR0IudatHPikIQnStyTtQSYBiSlfmsOd0MaBoQOnInPi-6X1Kd1Rr7ak03fKT1k8miaA7yS4D823g3L1JEgPRm13kx1BO1scQQgmnvmakkj7By_842IEI73-QQe-H8cg4u4Fhnn8XzQd2bXFAzkJN0U94qV2q-NLahQcWfF8S3zcHU7EscE6Uf5XfMT1bbBg3cVb7Qx7dWYS6Ke5dSjactCjkZQhwdWLMit7xTu4ylagBrwo0Sjdhs2CR3U7IREidKEhENasjFeMurNTPhm8H2BUjHF95nptyY1hn5CmJkWI1Hrtxa2eCuFVZdU1tqArDJ_tZhkLYgcftiMCz8-a0gAentzESYkkhbDwVvsxJzzwWT5rF8bWV9_pzQqBdhps0Xj_Ji529JRR39-f9a5vDIZAhcxgc-ODnbG6jrFnDfOSFoB-5AVsSah2Y1I8Hi0XcwXhNbcu1JXqmSuMjhJNl3LSOP4jioDaBMlugr9g7affnrb1Fq5JTB0SLF3IfAEzn6JViNXJbyFpFHf9BGJD0ybDDYB8JpsfsAvCMrOxshnyfcVFLZicMliGquX6R-ThbYM7xgeOSdQWCsM1pVW2RlYzxH_FavDm0-CY1d08dsYdWr1n91u8R6q3U8Tyw11aLodq1LLXuYTwbJKIonj-fqBo3QLDIAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None"},{"name":"fpc","value":"Aj_sE84ZGrBFtJ9xy-XpPHGxHdxzAQAAABZWW-IOAAAA","quoted":false,"path":"/","expires":"2026-11-08T21:39:34Z","raw_expires":"Sun, 08-Nov-2026 21:39:34 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"fpc=Aj_sE84ZGrBFtJ9xy-XpPHGxHdxzAQAAABZWW-IOAAAA; expires=Sun, 08-Nov-2026 21:39:34 GMT; path=/; secure; HttpOnly; SameSite=None"},{"name":"x-ms-gateway-slice","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly"},{"name":"stsservicecookie","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"stsservicecookie=estsfd; path=/; secure; samesite=none; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65673,"size_decoded":33772,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47360), with CRLF, LF line terminators","md5":"a4ce517f56498371944c497c2789d56c","sha1":"f073af225e49d838b30318bf42483aa010063ac7","sha256":"42ca12255210ec64916bfda3fa9e3f646b8fd1c88493c5e1fa7a91ace8bc0e16","sha512":"32418ed111c9e240a1964f11d86e213008eed33d284502d4c7533c1c9f5d63a2d68d4bd78a7c3b5883ca9a25b4aae8e1d1cda195a8e67494f99b7934ac0e90b4","ssdeep":"1536:HVE8GLG2QPDilpr8rUWqW8YZ9Tjuokmap5vPozbuTab:1E85Olpg4FWta/A7","tlshash":"21538ea67b84383bc7825975c0af7707de3929535888cc88f4ddc48d1dbabea5623607","first_seen":"2026-10-09T21:40:13.065804Z","last_seen":"2026-10-09T21:40:13.065804Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2492,"timings":{"blocked":0,"dns":6,"connect":11,"send":0,"wait":238,"receive":22,"ssl":2215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","date":"2026-10-09T21:39:35.193Z","timestamp":1791581975193,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzVCgFbeIBqYh0ZIsL8czw2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","date":"2026-10-09T21:39:35.195Z","timestamp":1791581975195,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/js/ConvergedLogin_PCore_IzVCgFbeIBqYh0ZIsL8czw2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","date":"2026-10-09T21:39:35.196Z","timestamp":1791581975196,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nOrigin: https://login.microsoftonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.microsoftonline.com/783aa708-6112-42a7-b855-c7296ee31b8b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026response%5Fmode=form%5Fpost\u0026ear%5Fjwe%5Fcrypto=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTI1NkdDTSIsImFwdiI6IkFBQUFDVVZoY2tOc2FXVnVkR2dBQUFCRlEwc3pNQUFBQUMxVFFhVGZ6eDEvS0IyVFN6OU52dWJId1dDbkV0MUZ5NmhRbXdXN24wZEQ1VmI1UndSR1plMGRQRm1saVNXOHJaUjI4UnJreWl2ZzdBY1FPOWdQalNRYkdiT3NwMlJrMnE1T25oY1QwLzJOM1V1dTFaTWUwOVFNcTlFS3daRlZ5UUFBQUJnZEdCZTI0TzVXbVduL1FPTVRRWHBaS0lMcVBjOVBMOVk9In0%3D\u0026ear%5Fjwk=eyJhbGciOiJFQ0RILUVTIiwiY3J2IjoiUC0zODQiLCJ4IjoiQUFBQU1DMVRRYVRmengxL0tCMlRTejlOdnViSHdXQ25FdDFGeTZoUW13VzduMGRENVZiNVJ3UkdaZTBkUEZtbGlTVzhyUT09IiwieSI6IkFBQUFNSlIyOFJya3lpdmc3QWNRTzlnUGpTUWJHYk9zcDJSazJxNU9uaGNUMC8yTjNVdXUxWk1lMDlRTXE5RUt3WkZWeVE9PSIsImt0eSI6IkVDIn0%3D\u0026spa%5Fclient%5Fid=08e18876%2D6177%2D487e%2Db8b5%2Dcf950c1e598c\u0026client%5Finfo=1\u0026response%5Ftype=code%20id%5Ftoken%20spa%5Frt\u0026resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000\u0026scope=openid\u0026nonce=CD40F6BC4E5E6AB2A3543F2E6BFDAAF50C6657AF6D4064F8%2D51874FE342E576FEE141E7448BF97634C093B68FFC29B5B7F0A2871917615F2C\u0026redirect%5Furi=https%3A%2F%2Forrick%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx\u0026state=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\u0026claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D\u0026wsucxt=1\u0026cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a\u0026client%2Drequest%2Did=834c43a2%2D40d7%2Df000%2D7631%2D3701d6a922c4","date":"2026-10-09T21:39:37.610Z","timestamp":1791581977610,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.microsoftonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orrick.sharepoint.com/sites/OrrickTax-22085","fqdn":"orrick.sharepoint.com","domain":"sharepoint.com","tld":"com"},"ip":{"addr":"13.107.136.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T21:39:30.240Z","timestamp":1791581970240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sharepoint.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 23 Jan 2026 18:52:20 GMT","end":"Mon, 18 Jan 2027 18:52:20 GMT"},"fingerprint":{"sha1":"FA:54:FC:7E:DE:2C:B3:74:F4:96:8E:36:A7:3D:95:41:D0:19:13:5F","sha256":"7D:5F:B5:F1:81:82:2E:EF:84:1A:3E:7B:14:8C:44:D4:E0:9C:DD:D8:27:76:02:46:17:8B:35:09:50:7F:A5:B6"}}},"request":{"raw":"GET /sites/OrrickTax-22085 HTTP/1.1\r\nHost: orrick.sharepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-length: 234\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://orrick.sharepoint.com/sites/OrrickTax-22085/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FOrrickTax%2D22085\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nx-networkstatistics: 0,65535,0,0,290,28972,28972,139142\r\nx-sharepointhealthscore: 0\r\nisocdi: 0\r\nx-databoundary: NONE\r\nx-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/\r\nx-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/\r\nsprequestguid: 834c43a2-f0bc-f000-d061-91c98193d0c6\r\nrequest-id: 834c43a2-f0bc-f000-d061-91c98193d0c6\r\nms-cv: okNMg7zwAPDQYZHJgZPQxg.0\r\nsplogid: 834c43a2-f0bc-f000-d061-91c98193d0c6\r\nalt-svc: h3=\":443\";ma=86400\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":7200,\"endpoints\":[{\"url\":\"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000\u0026destinationEndpoint=Edge-Prod-OSL23r5a\u0026frontEnd=AFD\u0026RemoteIP=195.64.118.0\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":7200,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com teams.cloud.microsoft *.office365.com goals.cloud.microsoft *.powerapps.com *.powerbi.com *.yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com m365.cloud.microsoft *.cloud.microsoft *.stream.azure-test.net *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com teams.microsoft.com *.teams.microsoft.com securebroker.sharepointonline.com;\r\nsprequestduration: 49\r\nspiislatency: 0\r\nx-powered-by: ASP.NET\r\nmicrosoftsharepointteamservices: 16.0.0.27723\r\nx-content-type-options: nosniff\r\nx-ms-invokeapp: 1; RequireReadOnly\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 210C4C125EC64E829BE4642048B0BD61 Ref B: OSL231050213031 Ref C: 2026-10-09T21:39:31Z\r\ndate: Fri, 09 Oct 2026 21:39:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Microsoft SharePoint:16.0.0.27723","description":"SharePoint is a cloud-based collaborative platform to manage and share content.","website":"https://sharepoint.microsoft.com","common_platform_enumeration":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","icon":"Microsoft SharePoint.png","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T23:29:42.32241Z","times_seen":18985068,"resource_available":true,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":59,"connect":2,"send":0,"wait":503,"receive":0,"ssl":730},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}