1drv.ms/w/c/e990dac68d1adfc2/EbcrTpHUDRBAj11HtrL16EQBCQlESbfAC7knV30YKPbEtg?e=4:fmGoM1&at=9
0 B URL 1drv.ms/w/c/e990dac68d1adfc2/EbcrTpHUDRBAj11HtrL16EQBCQlESbfAC7knV30YKPbEtg?e=4:fmGoM1&at=9
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w/c/e990dac68d1adfc2/EbcrTpHUDRBAj11HtrL16EQBCQlESbfAC7knV30YKPbEtg?e=4:fmGoM1&at=9 HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?cid=e990dac68d1adfc2&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&ithint=file%2cdocx&e=4%3afmGoM1&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05
x-msnserver: DB1PPF589501EF2
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: DBLt8qeL2kOXR1GDL0YxeA.0
x-asmversion: UNKNOWN; 19.1381.322.2019
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 28B4F3D34A4F4405AB5FB2D45E72603F Ref B: OSL30EDGE0514 Ref C: 2024-05-01T14:55:45Z
date: Wed, 01 May 2024 14:55:44 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?cid=e990dac68d1adfc2&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&ithint=file%2cdocx&e=4%3afmGoM1&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05
302 Found 462 B URL User Request GET HTTP/2 onedrive.live.com/redir?cid=e990dac68d1adfc2&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&ithint=file%2cdocx&e=4%3afmGoM1&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectonedrive.com
Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A
ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File type HTML document, ASCII text, with very long lines (390), with CRLF line terminators
Hash 56b22990a8f92cb564c4fd8ee24659d2
4c6c466564e6e3306f27f1308f3792afffeaa8e2
cdd99937c354aa28d779d4648fc1d667796c2a03e68bbe75b798bcb8f75947b2
GET /redir?cid=e990dac68d1adfc2&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&ithint=file%2cdocx&e=4%3afmGoM1&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05 HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 462
content-type: text/html; charset=utf-8
expires: -1
location: /edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
set-cookie: E=P:aH4xyO5p3Ig=:thV92KrchjrbOeSk+nN7IwfU1zdop8CODvaCot1E6E0=:F; domain=.live.com; path=/
xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Wed, 01-May-2024 13:15:46 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 9fd8c46f5-qprqw
x-odwebserver: eurwesteur910235-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A74CA4CC94CE44F3B26D5CEFABB4A3CE Ref B: SVG20EDGE0419 Ref C: 2024-05-01T14:55:46Z
date: Wed, 01 May 2024 14:55:45 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
353 B URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (351)
Hash 31c05f8e27abe3f85548a4c9735da1c4
306e842778d688f377166b13ad0b695b035d42eb
c31b75d03121f2238e3f54b375534e141b2844ccd01c2e9d22412b154ff9ac50
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 353
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: f183d6b8-101e-005d-55dc-94f513000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 7A4B57CC16D96BA3C1F929248F196219900A9883F9728999400DC133C90567ED00
content-encoding: br
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:46 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28350400,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575346.1b097c0&TotalRTCDNTime=2&CompressionType=br&FileSize=353"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
7.9 kB URL res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
IP
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash 760f69985c44556f90d31cdb278286be
98632d39e3ca24fdd974ac98bf187963a065ce8a
4fbd8cc4075e1795215327af5e43e8ca3339677802700d19aefc57ba1713a12d
GET /officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:46:21 GMT
x-ms-request-id: da521681-601e-0082-4500-4a83bc000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:46 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28350379,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575346.1b097ab&TotalRTCDNTime=3&CompressionType=&FileSize=7886"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
200 OK 191 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (36211)
Size 191 kB (190595 bytes)
Hash 83c28bc9280bff98c404aa9eadaa67ee
fe235fa5b4d836ffa9d8a10e7b76da1af6289390
90b2fafd05da9eae5c5f3c11a7b665ff3744899cc53c7aa823825d302ca1cf63
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 190595
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: fa33e1dd-501e-005c-4adc-94aacf000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: FA1BFFE6E12A97BAA5CC65A0936960BB2D124103183D653C659338CABD538F8E00
content-encoding: br
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:46 GMT
akamai-request-bc: [a=95.101.10.205,b=28350410,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575346.1b097ca&TotalRTCDNTime=1&CompressionType=br&FileSize=190595"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
39 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65476)
Hash 7e8696b25a28fb4e7ea773a68aa8dfe5
2f29d7054388390d0040a5bfd2e6bc02d0a759a6
2abca138c3c22fb15ec89db558736331b6afc0ff557a55b4d2fadab6116cc877
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 38697
last-modified: Sat, 20 Apr 2024 06:22:14 GMT
x-ms-request-id: 49d7e669-e01e-0059-61dc-947814000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 23FB0AD6A406C190F5D7D5100518A7C92596D259DABDA4709E47DF5E3FB508D200
content-encoding: br
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:47 GMT
akamai-request-bc: [a=95.101.10.205,b=28351090,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575347.1b09a72&TotalRTCDNTime=7&CompressionType=br&FileSize=38697"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=7, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
2.7 kB URL wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5825)
Hash 9c53509a10f2fd620e781b2b5ec9e2e3
37845b01b916d180ed0fc987d3e45cb83b87f5c4
2f67531271d66392c693bc8be5b17d5bd527d03d73dfc2b52a1b3fe6ddc29609
GET /wise-m/owl/5mttl/production/100/manifest.js HTTP/1.1
Host: wise-m.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2667
last-modified: Wed, 01 May 2024 08:31:25 GMT
x-ms-request-id: 00cacde9-b01e-0009-02a2-9bba44000000
content-encoding: br
cache-control: max-age=300
date: Wed, 01 May 2024 14:55:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28351122,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575347.1b09a92&TotalRTCDNTime=2&CompressionType=br&FileSize=2667"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.slim.c1721d5ad3e9da8abe53.js
46 kB URL wise.public.cdn.office.net/wise/owl/owl.slim.c1721d5ad3e9da8abe53.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 56b3162582cf88f2b45d07d4ef79d7a7
04b58fd103bcbca463281485441be2e7102f6b3a
78f6d264af3456cac31261f6c5c7790655b0bc28843176c44b3fbd193cb13a85
GET /wise/owl/owl.slim.c1721d5ad3e9da8abe53.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 45812
last-modified: Tue, 30 Apr 2024 15:06:38 GMT
x-ms-request-id: d7ddb3ba-a01e-0015-1110-9be824000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28351214,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575347.1b09aee&TotalRTCDNTime=2&CompressionType=br&FileSize=45812"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
api-badgerp.svc.ms/v1.0/token
200 OK 0 B URL OPTIONS HTTP/2 api-badgerp.svc.ms/v1.0/token
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectsvc.ms
Fingerprint76:6D:28:DB:9D:06:38:CD:2A:35:0C:FD:C3:D5:35:49:8B:D0:C0:C7
ValidityWed, 27 Sep 2023 21:57:58 GMT - Sat, 21 Sep 2024 21:57:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1.0/token HTTP/1.1
Host: api-badgerp.svc.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
allow: OPTIONS, TRACE, GET, HEAD, POST
public: OPTIONS, TRACE, GET, HEAD, POST
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: appid,cache-control,canary,content-type,x-forcecache,authorization
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EC0D1F9B5AE044F9B03BD5DFBD560744 Ref B: OSL30EDGE0420 Ref C: 2024-05-01T14:55:47Z
date: Wed, 01 May 2024 14:55:46 GMT
content-length: 0
X-Firefox-Spdy: h2
api-badgerp.svc.ms/v1.0/token
200 OK 849 B URL OPTIONS HTTP/2 api-badgerp.svc.ms/v1.0/token
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectsvc.ms
Fingerprint76:6D:28:DB:9D:06:38:CD:2A:35:0C:FD:C3:D5:35:49:8B:D0:C0:C7
ValidityWed, 27 Sep 2023 21:57:58 GMT - Sat, 21 Sep 2024 21:57:58 GMT
Hash 5427eb52a0fc794885215fbddf88c153
36d07f797dc68c950ef533a0a4b9e9a5f0e0b3ce
1e5e1c64ad4904d0ac024acb52788dc7e759c2a984e34b81264db7aec6b28652
POST /v1.0/token HTTP/1.1
Host: api-badgerp.svc.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 48
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 849
content-type: application/json; charset=utf-8
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: appid,cache-control,canary,content-type,x-forcecache,authorization
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 85A0885C042640E4BD80071F3C0896A5 Ref B: OSL30EDGE0420 Ref C: 2024-05-01T14:55:47Z
date: Wed, 01 May 2024 14:55:46 GMT
X-Firefox-Spdy: h2
my.microsoftpersonalcontent.com/_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault
0 B URL my.microsoftpersonalcontent.com/_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1
Host: my.microsoftpersonalcontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,prefer
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
www-authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com"
x-networkstatistics: 0,525568,0,0,40324,0,35304
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, TRACE, CONNECT, PATCH, MERGE
access-control-allow-headers: authorization,prefer
x-databoundary: EU
x-1dscollectorurl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://eu-mobile.events.data.microsoft.com/Collector/3.0
sprequestguid: 466d24a1-507a-8000-9101-2118387373d8
request-id: 466d24a1-507a-8000-9101-2118387373d8
ms-cv: oSRtRnpQAICRASEYOHNz2A.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-SVG20r5a&frontEnd=AFD&RemoteIP=91.90.42.0"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.office365.com *.powerapps.com *.yammer.com engage.cloud.microsoft *.officeapps.live.com *.office.com *.microsoft365.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 46
spiislatency: 1
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.24810
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 700BDAD72ECA471781E1E1B45E14EF29 Ref B: SVG20EDGE0217 Ref C: 2024-05-01T14:55:47Z
date: Wed, 01 May 2024 14:55:46 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/wv/s/h6528CFC70A6404BE_App_Scripts/word.boot.js
200 OK 38 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/wv/s/h6528CFC70A6404BE_App_Scripts/word.boot.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 508971a9cef00896dcad0635f4f798d5
ba24c867fcd64da5101c27549b4a14d63f08924d
6528cfc70a6404beb785417ba0b188d37ee30387445e600a9fd0536408fdd5c3
GET /officeonline/wv/s/h6528CFC70A6404BE_App_Scripts/word.boot.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 37698
last-modified: Fri, 12 Apr 2024 12:22:04 GMT
x-ms-request-id: c0d1616d-801e-004f-1cc7-8d8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:48 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354115,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575348.1b0a643&TotalRTCDNTime=1&CompressionType=br&FileSize=37698"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 628
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=449e7457ff1788af3aad6268a22a273342dc947d7478187f1d55a73bba16bc74;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 43fd5661-b6e3-4435-b188-57953059a361
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D754
x-officeversion: 16.0.17617.41003
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4EA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: B1BD71D0C86E410797099B17D5BFDBD5 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:48Z
date: Wed, 01 May 2024 14:55:48 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
0 B URL word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4856
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 8ac0f032-a183-4976-a9ce-e4e4ba1d43bc
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF000089E8
x-officeversion: 16.0.17625.41013
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 231A066F5546462CA488BB94CEBC4C1B Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:48Z
date: Wed, 01 May 2024 14:55:48 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
0 B URL word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 112
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 265bf13a-81ee-473d-8bf7-3e956557bc07
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AB5
x-officeversion: 16.0.17625.41013
x-officecluster: PIE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1AAC3303525D4679BD4E0F6886E29F6D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:48Z
date: Wed, 01 May 2024 14:55:48 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1141)
Hash bcc8fcba76c1a94f5ebe1d9b803dec6f
03b30d8e3852b7872351c9e427e54100153d082e
53ce432c2b641e87f8bf0c9eb069fda8b8e858cf5b3e4cdb701d26dc4cd47df1
GET /officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8641
content-type: text/css
last-modified: Tue, 02 Apr 2024 06:34:15 GMT
x-ms-request-id: 278ab5b9-201e-000b-16f7-8404fc000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354847,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a91f&TotalRTCDNTime=2&CompressionType=br&FileSize=8641"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css
48 kB URL res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 22a31ef6ea33c613f32ae63cbbf266fe
3b7bce9a1cf9035d52e8d4b39a31d53fb2f244e5
44ff8165a748f6742c4f130ef169f2d6d5744436b7d19786431418035522e3a8
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47867
content-type: text/css
last-modified: Sat, 06 Apr 2024 01:34:42 GMT
x-ms-request-id: 6039a450-701e-0016-6cc1-890940000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354864,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a930&TotalRTCDNTime=2&CompressionType=br&FileSize=47867"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js
200 OK 44 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1feaeeb7b1ae29e6413f41765e1d7897
24936ed745c26dbb6b24ce4af6c59ba62e080744
6c9b58b5a3e38aa740c836015b4c63cc8086aa207ea1b6eec5a9167b15e9608c
GET /officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43748
last-modified: Thu, 18 Apr 2024 12:43:11 GMT
x-ms-request-id: 855e2d7a-601e-0068-06e0-929907000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354865,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a931&TotalRTCDNTime=2&CompressionType=br&FileSize=43748"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hF448A0F201215C2D_resources/en-US/clientManifest.exp.js
200 OK 31 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hF448A0F201215C2D_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8cadcc376a8898255fe720c8b104fa3d
dd44d1e92c4706fd1e3224be5e2fd2bb04115398
f448a0f201215c2d62d926daa44f802ceafee32779eec24f0a40af6ef70c4e26
GET /officeonline/we/s/hF448A0F201215C2D_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31259
last-modified: Fri, 26 Apr 2024 01:50:08 GMT
x-ms-request-id: a385f586-a01e-003a-3398-97e5ef000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354940,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a97c&TotalRTCDNTime=2&CompressionType=br&FileSize=31259"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h898C02B22DC1B572_App_Scripts/wp5/appResourceLoader.min.js
9.1 kB URL res-1.cdn.office.net/officeonline/we/s/h898C02B22DC1B572_App_Scripts/wp5/appResourceLoader.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (38549)
Hash 8e1aa59cc05dd66dd029c9ff4e6eff2b
3bf6976d557f2d25628795a2c905bc04daec8d94
898c02b22dc1b572a819265c00857bf62b224a88e6a3999ebef157cf7653f908
GET /officeonline/we/s/h898C02B22DC1B572_App_Scripts/wp5/appResourceLoader.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9077
last-modified: Thu, 25 Apr 2024 00:38:02 GMT
x-ms-request-id: a385bcaa-a01e-003a-1b98-97e5ef000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354941,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a97d&TotalRTCDNTime=2&CompressionType=br&FileSize=9077"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 036bd0e2-801e-004f-5c65-7a8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354942,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a97e&TotalRTCDNTime=2&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h31A03CD3184EC716_App_Scripts/1033/common-intl.min.js
39 kB URL res-1.cdn.office.net/officeonline/we/s/h31A03CD3184EC716_App_Scripts/1033/common-intl.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (54955)
Hash f58d254cc4ad04d9b1991de9828c20f8
d6808f935f02e04d4c6e395020f0c8d96dfb593c
31a03cd3184ec7161c1e1fbac71e102e291117e017f79f23067260fce7324a14
GET /officeonline/we/s/h31A03CD3184EC716_App_Scripts/1033/common-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39103
last-modified: Fri, 26 Apr 2024 01:49:17 GMT
x-ms-request-id: 7293ab2b-901e-0031-6f98-971e84000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28354951,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0a987&TotalRTCDNTime=2&CompressionType=br&FileSize=39103"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
1.4 kB URL res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (5962)
Hash de83a7b3bc0a43a5f4e6bf8e71f5413c
bc3274e5c413edfa65fb6333e63d7fbefe1a12a8
a5e36060f6eab9c2b23dc2724f3758edc2d38a7336a619bdb463c3b3a81077cf
GET /officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1445
last-modified: Mon, 11 Sep 2023 19:12:49 GMT
x-ms-request-id: c0ed9176-401e-005e-0b44-4c29e2000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355248,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab0&TotalRTCDNTime=2&CompressionType=br&FileSize=1445"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hF3C2C226B00FDC4A_App_Scripts/1033/box4-strings.min.js
16 kB URL res-1.cdn.office.net/officeonline/we/s/hF3C2C226B00FDC4A_App_Scripts/1033/box4-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Hash 3d663db8a62c2607360db711758a35b2
00b4324872e81c003f361ec7ae2067886b713bea
f3c2c226b00fdc4a35b4a445e7394520f3ffa9df01af6ce75a6b12a3b49e73cc
GET /officeonline/we/s/hF3C2C226B00FDC4A_App_Scripts/1033/box4-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 15745
last-modified: Fri, 26 Apr 2024 01:50:09 GMT
x-ms-request-id: 6c28881e-301e-0038-0398-975b57000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355249,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab1&TotalRTCDNTime=2&CompressionType=br&FileSize=15745"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js
200 OK 5.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (24333)
Hash bfb49c4480ecec32ce0d074310fed8ee
19eeb70dc9c1af130370fb66b6bbe6bf732fe415
3f1b277888db9ee63d985c8bcb1824e4cd3899164eb2ff3fff19c6439b8b2e33
GET /officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5436
last-modified: Wed, 03 Apr 2024 22:44:42 GMT
x-ms-request-id: e381e188-b01e-006b-3f2b-867863000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355250,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab2&TotalRTCDNTime=2&CompressionType=br&FileSize=5436"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h22DE6670F830DA30_App_Scripts/1033/wac-wordeditor-strings.min.js
18 kB URL res-1.cdn.office.net/officeonline/we/s/h22DE6670F830DA30_App_Scripts/1033/wac-wordeditor-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65516), with no line terminators
Hash e0dcac8a42856cf3d086728abe2d49e5
2c395b03c795fc2a80add24a544e679c91ecc53d
22de6670f830da30ff2d65fad5bbee731862d0a9618c726f86b725b172ca0e90
GET /officeonline/we/s/h22DE6670F830DA30_App_Scripts/1033/wac-wordeditor-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18079
last-modified: Fri, 26 Apr 2024 01:43:21 GMT
x-ms-request-id: 400880e0-c01e-005e-5f98-971477000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355251,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab3&TotalRTCDNTime=2&CompressionType=br&FileSize=18079"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h9CBFE7392752C7BA_App_Scripts/WordEditorDS.core.js
403 kB URL res-1.cdn.office.net/officeonline/we/s/h9CBFE7392752C7BA_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (2926)
Size 403 kB (402977 bytes)
Hash 759210878fa1ecce10926e281dafe584
e6c2a881c3bde4b329def8579a0e17b5625a5717
9cbfe7392752c7bab0902f666d16b9ba6047feba6b52cc7043dfbeba2e4fd431
GET /officeonline/we/s/h9CBFE7392752C7BA_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 402977
last-modified: Fri, 26 Apr 2024 01:42:22 GMT
x-ms-request-id: ea5ffc18-e01e-0066-2298-97b0b7000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355252,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab4&TotalRTCDNTime=2&CompressionType=br&FileSize=402977"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
4.5 kB URL res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 01ae70c8-701e-0029-35f6-74c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355260,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aabc&TotalRTCDNTime=2&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 06 Apr 2024 01:34:17 GMT
x-ms-request-id: ff891282-801e-004f-17f4-898ec3000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355526,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0abc6&TotalRTCDNTime=2&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
2.9 kB URL res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 2944, version 4.30147
Hash 569a610df4fd269faa528a2197dfaa9a
cfc7596b939a341c5ddffc53cfd607745af18e8f
09a1411bf361d3d649f4ff5098e0197510232477bf099872f58f5d1ec483e9af
GET /officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2944
last-modified: Tue, 11 Apr 2023 08:47:45 GMT
x-ms-request-id: 1ba53f5a-d01e-0042-1bfa-6e4617000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355527,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0abc7&TotalRTCDNTime=2&CompressionType=&FileSize=2944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hBAF59FFBFBDED8AA_App_Scripts/WordEditorDS.js
200 OK 1.0 MB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hBAF59FFBFBDED8AA_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (715)
Size 1.0 MB (1021365 bytes)
Hash 0c0a86eb63200987626aee0ac493d3c6
85138441a741ee61c13903ca349b7f8660c76c00
baf59ffbfbded8aa935be5609cbd663f214f8b1d409ae8986f56d78da6365299
GET /officeonline/we/s/hBAF59FFBFBDED8AA_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1021365
last-modified: Fri, 26 Apr 2024 01:42:47 GMT
x-ms-request-id: ed8d7c56-e01e-0004-0d98-977290000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28355253,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575349.1b0aab5&TotalRTCDNTime=2&CompressionType=br&FileSize=1021365"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
124 kB URL word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Size 124 kB (124210 bytes)
Hash e725b0007377b8f5fe73241b5f0cdddc
c89e40e7952a80edc92db068c245200230852bbd
cd928894ef738fccba907e4ee9462af13dcd2ae1d03fd09ed0b7ce3a4244f129
POST /we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 5356
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 42137490-9be7-4216-bccc-7baed0659998
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ==, AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
origin-agent-cluster: ?1
x-officefe: AM4PEPF0002D783
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
content-security-policy-report-only: font-src data: 'self' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; media-src blob: *.skype.com *.skypeassets.com https:; object-src 'self' https:; child-src blob: * ms-word: https:; worker-src blob: https:; img-src * data: blob: https:; report-uri /we/reportcsp.ashx
document-policy: js-profiling
reporting-endpoints: default="https://word-edit.officeapps.live.com/we/BrowserReportingHandler.ashx"
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=PNL1&FileSource=SharePointOnlineConsumer"}]}
server-timing: WELPreRender;dur=14,WELRender;dur=0,Total;dur=14,WEAConstructor;dur=0,WEAInitialize;dur=0,WEFOnLoad;dur=0,WEFOnPreRender;dur=2
x-officefd: AM4PEPF0002D783
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 6045D934D3C84C75A8ADC5FED728BA82 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:48Z
date: Wed, 01 May 2024 14:55:48 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
42 kB URL word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65031), with no line terminators
Hash adeada491159ebb0223bad93081f2156
221056a4957e4625c994f155c16e73d20ac52e80
dff57b2caff553dc48c1eaf9699b0627ec6a16449ae27cd99f22e3246446d72d
POST /we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
Content-Type: application/json; charset=utf-8
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-UserType: WOPI
X-WacCluster: PNL1
X-FEMachineId: AM4PEPF0002D783
X-SessionStartDimensions: {"Application":"Word","Browser":"Firefox","BrowserMajorVersion":"96","BrowserVersion":"96.0","Host":"SharePoint Online Consumer","IsSynthetic":"False","Os":"Linux","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"OTHER","UiHost":"onedrivecom","UserSessionApplicationMode":"Unified","WACDatacenter":"PNL1"}
X-Requested-With: XMLHttpRequest
Content-Length: 4562
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
pragma: no-cache
content-length: 41827
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4e67d4f7-bca5-4da3-9782-a3b3e70d8f99
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefe: AM4PEPF0002D783
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
x-officefd: AM4PEPF0002D7EF
x-wacfrontend: AM4PEPF0002D783
x-officertcproxy: AM4PEPF0002D7EF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: AE9F56002D4042F688878D3D2E0EC75D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:49Z
date: Wed, 01 May 2024 14:55:49 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: df670694-a9b9-42ed-8dfb-4f5dcb85b927
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:49 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":0,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 40faea37-773d-46eb-9d58-5952cb2ed93c
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:50 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 94c070cd-2c42-47e7-b185-39808fe5bd33
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":4,"Value":"{'k':[{'e' : 4, 'n' : 'BBODI'}]}","Type":"Kpi"},{"Index":2,"MsSinceStart":5,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSH', 'd' : '5'}]}","Type":"KPI"},{"Index":3,"MsSinceStart":121,"Value":"{'k':[{'e': 4,'n':'BBISS'}]}","Type":"Kpi"},{"Index":4,"MsSinceStart":121,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSI', 'd' : '121'}]}","Type":"KPI"},{"Index":5,"MsSinceStart":197,"Value":"WordEditorInstantApp.StartWacBoot","Type":"BootLogs"},{"Index":6,"MsSinceStart":199,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":7,"MsSinceStart":200,"Value":"{'k':[{'e': 4,'n':'BBIGC'}]}","Type":"Kpi"},{"Index":8,"MsSinceStart":1872,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":9,"MsSinceStart":1917,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 0e95fde4-7dd7-45e9-a2c1-3dfdfe101c6e
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: ea171f87-b1e0-4fd8-86c3-3e9ddce6fda3
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 9238
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: f33b505c-4eee-44d9-bf46-e67f49ef0c3f
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7F1
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: BBF25BF16E3F47539EC612799210E611 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:51Z
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":9,"MsSinceStart":2121,"Value":"https://res-1.cdn.office.net:443/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js","Type":"ResourceDownloadSuccess"},{"Index":10,"MsSinceStart":2123,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 42f40373-31ee-4caa-b6a2-97c5d3e64be8
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h95C88E8809B03DCE_App_Scripts/1033/word-app-intl-mlr.min.js
200 OK 110 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h95C88E8809B03DCE_App_Scripts/1033/word-app-intl-mlr.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 110 kB (109608 bytes)
Hash bdb13590072b97162f156742aabb45c5
0a6be5df6d295637410896db9e6f7c1f2ea3fa6d
95c88e8809b03dce366c50b90fb5e5e95fb9ab86fd35471bb7bd03c7e7de5ee9
GET /officeonline/we/s/h95C88E8809B03DCE_App_Scripts/1033/word-app-intl-mlr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 109608
last-modified: Fri, 26 Apr 2024 01:49:56 GMT
x-ms-request-id: d06273c4-e01e-0066-1555-99b0b7000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28359214,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575351.1b0ba2e&TotalRTCDNTime=2&CompressionType=br&FileSize=109608"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4BA3A13D402DAFC3_App_Scripts/wp5/appChrome.min.js
76 kB URL res-1.cdn.office.net/officeonline/we/s/h4BA3A13D402DAFC3_App_Scripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash bac96d66d8f9e6471e9da69630bc4c31
58700b90afed41c21831603e0cbb354cf7bd35b1
4ba3a13d402dafc38abb6cfba9f9c72ec5a430fb35de0a39d1266e69d964c229
GET /officeonline/we/s/h4BA3A13D402DAFC3_App_Scripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76503
last-modified: Wed, 24 Apr 2024 16:32:05 GMT
x-ms-request-id: 401a929e-c01e-005e-7a9c-971477000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28359247,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575351.1b0ba4f&TotalRTCDNTime=2&CompressionType=br&FileSize=76503"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
200 OK 6.7 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (46689), with no line terminators
Hash 9baaaf4d89e3b888bc9e400611d61b68
e4bdf6feedba53db1365f3e37f70fb6073b868af
095762fee3e77525953b8c3091a4f83f80f50fe5ab31499c403b3ed442806974
GET /officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6686
last-modified: Wed, 10 Jan 2024 09:21:00 GMT
x-ms-request-id: 7c3d7855-901e-000e-40a8-7ad627000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28359248,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575351.1b0ba50&TotalRTCDNTime=2&CompressionType=br&FileSize=6686"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h40350A0A926475E9_App_Scripts/wp5/common.min.js
393 kB URL res-1.cdn.office.net/officeonline/we/s/h40350A0A926475E9_App_Scripts/wp5/common.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65468)
Size 393 kB (392637 bytes)
Hash 60bc5189eb50d6f6d95d96522c7b57e9
b9929f806fd6b16b0dacfbfbeeed4182b2a7a529
40350a0a926475e9c5d0b625426e74470f4ea105c2a708789d8eb431629eb4a1
GET /officeonline/we/s/h40350A0A926475E9_App_Scripts/wp5/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 392637
last-modified: Thu, 25 Apr 2024 00:37:53 GMT
x-ms-request-id: dcb54599-401e-0050-389c-973dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28359231,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575351.1b0ba3f&TotalRTCDNTime=2&CompressionType=br&FileSize=392637"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Wed, 01 May 2024 14:55:50 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
200 OK 23 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 06 Apr 2024 01:34:38 GMT
x-ms-request-id: 02a34241-701e-0064-67cf-890e0f000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28359911,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575351.1b0bce7&TotalRTCDNTime=2&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2418
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 3d697bcf-00e9-44f4-8af9-dd7a7cbfa074
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7E0
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: 3FC44F47BFD34601A15C5BB77AF8A880 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:51Z
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 2f91ff1f-f499-4b4b-9e2f-1b4d1b480e84
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Wed, 01 May 2024 14:55:51 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":10,"MsSinceStart":2151,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":11,"MsSinceStart":2259,"Value":"DocumentCacheRemover.evictSpecifiedCacheItem result: false","Type":"RemoveInvalidDocumentCacheItem"},{"Index":12,"MsSinceStart":2285,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSO', 'd' : '2285'}]}","Type":"KPI"},{"Index":13,"MsSinceStart":2315,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 84ce1a96-f63d-473b-b0c2-93ad137f8a71
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
6.3 kB URL res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6336
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:56:57 GMT
x-ms-request-id: b2e39cb6-501e-0089-4e2f-4778d7000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28361004,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575352.1b0c12c&TotalRTCDNTime=1&CompressionType=&FileSize=6336"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
25 kB URL res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 296 x 302, 8-bit/color RGBA, non-interlaced
Hash fd59a454c80d16a1cb998096478f7068
eb74904b48f598ec609be7b6e0089ae5f06db825
83987e0f63d43f20ff756121f3d91b50787c1e4e57d3bca110c06d0d6423c8cc
GET /officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24960
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:42 GMT
x-ms-request-id: 0d39bcc9-301e-009f-790f-4e8e00000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28361023,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575352.1b0c13f&TotalRTCDNTime=1&CompressionType=&FileSize=24960"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2271
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 181e4051-d6ff-4d8c-a539-0da8a02fe5f7
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7A4
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7C46DA1BED664529A0986756B8982ED9 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:52Z
date: Wed, 01 May 2024 14:55:51 GMT
content-length: 0
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
204 No Content 0 B URL OPTIONS HTTP/2 officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectconfig.officeapps.live.com
Fingerprint0B:36:47:63:5B:8D:FE:A9:FE:C9:C2:CC:50:38:30:84:BB:55:95:F6
ValidityThu, 22 Feb 2024 19:31:53 GMT - Sun, 16 Feb 2025 19:31:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-office-application,x-office-platform,x-office-version
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: 52d76054-e8f6-433d-9175-fd001f323413
x-officefe: ConfigFE_IN_217
x-officeversion: 16.0.17619.30529
x-officecluster: uks-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
access-control-max-age: 600
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Wed, 01 May 2024 14:55:51 GMT
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
204 No Content 273 B URL OPTIONS HTTP/2 officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectconfig.officeapps.live.com
Fingerprint0B:36:47:63:5B:8D:FE:A9:FE:C9:C2:CC:50:38:30:84:BB:55:95:F6
ValidityThu, 22 Feb 2024 19:31:53 GMT - Sun, 16 Feb 2025 19:31:53 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e781a10d0efa72a38ae3e3e44bb7d57b
d215c3649a3ad7c529538100974ba54dd5917dc8
6924d7db54fff1f3aeacf49be6a8ac2faa1959f14f4ceb55d411d138bfbb3bbf
GET /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/xml
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Office-Platform: Web
X-Office-Application: 132
X-Office-Version: 16.0.17625.41013
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=172800
content-type: application/xml
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: 5ed73066-439c-42c4-8899-9a3d3f736879
x-officefe: ConfigFE_IN_217
x-officeversion: 16.0.17619.30529
x-officecluster: uks-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
x-aspnet-version: 4.0.30319
x-office-cachecleardate: 2009-01-01T00:00:00
x-office-cacheduration: 2880
x-powered-by: ASP.NET
date: Wed, 01 May 2024 14:55:52 GMT
content-length: 273
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4587
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 526d0a42-9c37-4343-8484-a54e0e7188f0
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D76E
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2D93C855D1E545A4B99C276BB5BA30B6 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:52Z
date: Wed, 01 May 2024 14:55:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
200 OK 2.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (10543), with no line terminators
Hash d4e64835d59be3b4abf3ee7ad4d7d1dc
bba289bfe7c4d1e82fdc3ab1093ed579b2219b6e
24bada8ee5ddc747d0f1297a13f3ec53ecea5aa03e48749329c0f9b0e28e9d09
GET /officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2489
last-modified: Wed, 17 Jan 2024 21:34:51 GMT
x-ms-request-id: 527cf0ae-e01e-00a3-7a81-50a7c7000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28363015,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575352.1b0c907&TotalRTCDNTime=2&CompressionType=br&FileSize=2489"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD7240700DC6C3A05_App_Scripts/wp5/floatingContainerManager.min.js
200 OK 15 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hD7240700DC6C3A05_App_Scripts/wp5/floatingContainerManager.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash ba65f7047a383f2dc55c46358856f267
e54d3e0e2604d3d59b5a51f684e1b6bb43608bc6
d7240700dc6c3a05534230ea214dc6226623e5fb76c3cb9621c84d37111eaca0
GET /officeonline/we/s/hD7240700DC6C3A05_App_Scripts/wp5/floatingContainerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 14996
last-modified: Wed, 24 Apr 2024 16:32:10 GMT
x-ms-request-id: f20ec4bb-001e-0033-5d9c-97a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28363017,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575353.1b0c909&TotalRTCDNTime=2&CompressionType=br&FileSize=14996"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 82eb4617-ca5a-4cd4-9a4a-ed7411fee222
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h810EF6425DDD35A0_App_Scripts/wp5/common50.min.js
507 kB URL res-1.cdn.office.net/officeonline/we/s/h810EF6425DDD35A0_App_Scripts/wp5/common50.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65466)
Size 507 kB (507152 bytes)
Hash 01fc3131ff14a3cd16d065985f6eb357
390a3c0ac1c0186782f13094b238b9cc7c0b0064
810ef6425ddd35a05cfb4a2d3ba654b63e9c3852cc1d2e9b52cb633bd95f3ea9
GET /officeonline/we/s/h810EF6425DDD35A0_App_Scripts/wp5/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 507152
last-modified: Thu, 25 Apr 2024 00:38:02 GMT
x-ms-request-id: cf32b70f-901e-0021-799c-97dbec000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28363016,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575352.1b0c908&TotalRTCDNTime=2&CompressionType=br&FileSize=507152"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 8bde0486-35b0-4e1b-82d5-93deb1804360
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:52 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 28337
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 231711e3-ebba-486a-9f29-2d8b36848826
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:53 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":13,"MsSinceStart":3684,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":14,"MsSinceStart":3789,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":15,"MsSinceStart":3789,"Value":"{'k':[{'e' : 3, 'n' : 'BBCST', 'd' : '3789'}]}","Type":"KPI"},{"Index":16,"MsSinceStart":3789,"Value":"{'k':[{'e' : 3, 'n' : 'BBODI', 'd' : '3789'}]}","Type":"Kpi"},{"Index":17,"MsSinceStart":3824,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ed5b38f2-f693-4177-84ff-e003501c4e6a
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:53 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
148 kB URL res-1.cdn.office.net/officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147734 bytes)
Hash 0510f729b1344e41d67b7b69bbe221ff
ed09f9bb3494adeadd0f3c52891b7ded8f80f85e
04ae84a2174b2cbccb0a18cd5a3a47aa36b2c9e097968d4f6fa011b6eefd2f5f
GET /officeonline/we/s/h04AE84A2174B2CBC_App_Scripts/1033/word-app-intl-mlr-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 147734
last-modified: Fri, 19 Apr 2024 19:27:53 GMT
x-ms-request-id: adcf1496-901e-0031-4b29-961e84000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28365716,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d394&TotalRTCDNTime=2&CompressionType=br&FileSize=147734"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.handlers.1621daa1e7f5f520fc70.js
19 kB URL wise.public.cdn.office.net/wise/owl/owl.handlers.1621daa1e7f5f520fc70.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b8bd57ecd3edf359fc82d563c3e021d0
56eb16f7bbff34e1333e9ae74fa64b44766b11b9
c357ed60c74ad19230f339f513d0f3b23314f7ef425349d127a3f8273ba35abc
GET /wise/owl/owl.handlers.1621daa1e7f5f520fc70.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18934
last-modified: Tue, 30 Apr 2024 15:06:38 GMT
x-ms-request-id: 4df2391e-601e-0025-6d13-9b56eb000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366340,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d604&TotalRTCDNTime=1&CompressionType=br&FileSize=18934"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 968b72dc-201e-0015-0f72-4cd5b1000000
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366337,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d601&TotalRTCDNTime=2&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
32 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366338,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d602&TotalRTCDNTime=2&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hF7C036E0B27E5862_App_Scripts/wp5/sharedComments.min.js
47 kB URL res-1.cdn.office.net/officeonline/we/s/hF7C036E0B27E5862_App_Scripts/wp5/sharedComments.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (58646), with NEL line terminators
Hash c4f38b6ef2d2293413bfccb6e3acc8e0
a8f85b0fc39b0a5e98fc512b0e3ef8c4e1b6478b
f7c036e0b27e586264e4df09f6608bcdf4bbc2e05adb3cf0795bf9692507fec9
GET /officeonline/we/s/hF7C036E0B27E5862_App_Scripts/wp5/sharedComments.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 46990
last-modified: Wed, 24 Apr 2024 08:39:15 GMT
x-ms-request-id: c56cbb4a-f01e-0045-319c-972a74000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366339,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d603&TotalRTCDNTime=2&CompressionType=br&FileSize=46990"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
1.9 kB URL res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1922
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:35 GMT
x-ms-request-id: 44f0d600-a01e-009d-4e66-4630b8000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366484,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d694&TotalRTCDNTime=1&CompressionType=&FileSize=1922"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
0 B URL word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 119
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: f64bd1d3-bf2a-4cfb-bf8f-817186b81e4c
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ABB
x-officeversion: 16.0.17625.41013
x-officecluster: PIE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: C0423F49EF5A4AD586B4F1C5F85B1223 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h1E3470B4336F0B36_App_Scripts/WordEditorDS.common.js
200 OK 220 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h1E3470B4336F0B36_App_Scripts/WordEditorDS.common.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (765)
Size 220 kB (219962 bytes)
Hash ab641f232a2c48dfcd938d4d77a61835
30813504e546760188b0ada4019bbc7835472b3f
1e3470b4336f0b36ad9dbe978695fa06b5c7dbedd3f9aee132c2e13b8761d0d6
GET /officeonline/we/s/h1E3470B4336F0B36_App_Scripts/WordEditorDS.common.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 219962
last-modified: Fri, 26 Apr 2024 01:42:21 GMT
x-ms-request-id: 99fd1d8a-f01e-0037-3c9c-972d3b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366600,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d708&TotalRTCDNTime=2&CompressionType=br&FileSize=219962"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/listAll_hier.json
80 kB URL fs.microsoft.com/fs/4.39/listAll_hier.json
IP
Hash 570a3464700c535899f161a98aace39a
34e8a553b79a4b503e713d84a7dc1e361729a335
9814d7e977b0d71a645e400515c4ccfa058d8af6dd941eb0f8ef66e320b2b11a
GET /fs/4.39/listAll_hier.json HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 19:59:59 GMT
Accept-Ranges: bytes
ETag: "0x23C04CEA074159BC5D58077E0DC242BED221AD8977E4F05F5E543636393509A5"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=listAll_hier.json; filename*=UTF-8''listAll_hier.json
X-MSEdge-Ref: Ref A: 54157EB4F3B34C68AF884C526A01710E Ref B: LTSEDGE2119 Ref C: 2024-03-26T17:25:55Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79450
Cache-Control: public, max-age=207196
Date: Wed, 01 May 2024 14:55:54 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/h76A28BAB118AD9FA_App_Scripts/WordEditorDS.box4.dll1.js
601 kB URL res-1.cdn.office.net/officeonline/we/s/h76A28BAB118AD9FA_App_Scripts/WordEditorDS.box4.dll1.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (2821)
Size 601 kB (600616 bytes)
Hash d12abf71cab28e25f964c01608446494
18dc89749a049903e687ed05313c839898e5be4a
76a28bab118ad9fa5e94f1c5ffe672a766de439ec7298212872ec5e6926af4c6
GET /officeonline/we/s/h76A28BAB118AD9FA_App_Scripts/WordEditorDS.box4.dll1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 600616
last-modified: Fri, 26 Apr 2024 01:41:42 GMT
x-ms-request-id: 82f7503a-e01e-002b-219c-977f5b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28366601,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0d709&TotalRTCDNTime=2&CompressionType=br&FileSize=600616"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
227 B URL word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 633d2faea349522d56f0549b3c374d1d
9c5b311b214e553bad20039f4d34eeb8be8b676e
d78207571b7370ba7697998285d75d764de6c7dfb1d06f17f489bcc45d00231a
POST /we/OneNote.ashx?perfTag=HotStoreStatus_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 3020
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 227
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 98f22906-c605-4731-841d-3ff47dcc1bad
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000020F1
x-wacfrontend: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 816583B85F1C43D48F659127FD61AD89 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
200 OK 8.2 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (35371)
Hash be73523c970f0bfa1c8f0a8c51f80bfc
b3bc3fd464e0a5766f27f84ca8d0c30993a26275
494ae42932343d70f747f5937271e4bc7b020d53a1a2973876b15af26db7b1dc
GET /officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8188
last-modified: Tue, 26 Mar 2024 16:11:38 GMT
x-ms-request-id: c53a9b4a-601e-0035-69cc-809383000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28367478,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575354.1b0da76&TotalRTCDNTime=1&CompressionType=br&FileSize=8188"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
0 B URL word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2827
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 01acc975-afea-4857-8c22-eee5a690cc29
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D78A
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: B1DCDDEEF3594B72B26F9161DAA3A647 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
0 B URL word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4988
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e039381b-d15a-4600-a4ef-46bee51d2a67
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7D5
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1475E833E16F4AB39EDE5845F719D0D0 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
58 kB URL word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash a470ce2bbd8c25d0dc0c6e69e65ffe5c
f57aae0d8c573da16a9a567f1b913299f23c0741
325c666292d21a74d410b1c1de6af779fa9cae47a75f6c40937244ef66ab2a21
POST /we/OneNote.ashx?perfTag=LatentStyles_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 1637
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 57515
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ef1a7f93-1de0-4a55-8b1b-6a74449f1225
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002210
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002210
x-wacfrontend: BN3PEPF00002210
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: B05942455D5D47618C184CDF832AA66B Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4870
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: f2bae5c0-4192-4721-97d1-e20a3dd0e3ee
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D78F
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2C84353E95074356BB0AA83C514BDC66 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:55Z
date: Wed, 01 May 2024 14:55:55 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif
200 OK 49 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type GIF image data, version 89a, 10 x 10
Hash 76084e29cb2cf72b320e888edc583dfb
8a1ca8ddc90d8a1bc2a6d2147bab31b5904bfd83
02d2855c8a5417cd637df1e81f781e42ff2b12ad6dffb923a3822f16b5bfa82a
GET /officeonline/we/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 49
content-type: image/gif
last-modified: Tue, 11 Apr 2023 08:47:32 GMT
x-ms-request-id: ac33fe9f-701e-009e-405b-46d1dc000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368765,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7d&TotalRTCDNTime=1&CompressionType=&FileSize=49"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur
4.3 kB URL res-1.cdn.office.net/officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @6x7
Hash 3621da92c936c41c63babe6e272263f9
9ac82ed8315f43942b15aa4c43b1d44bc82bd56a
d55e5e9c2ad2e4f522755fd1fd7384f7322c398adb937a44e4f7740c845d7f31
GET /officeonline/we/s/hD55E5E9C2AD2E4F5_resources/1033/ColResize.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4286
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:57:21 GMT
x-ms-request-id: 321a74ca-301e-0054-1248-498d55000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368762,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7a&TotalRTCDNTime=1&CompressionType=&FileSize=4286"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur
4.3 kB URL res-1.cdn.office.net/officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @7x6
Hash 8346c658578be85138045c74294e910d
9ba6fd9cbc4990f43af474459d892c1f35d68149
1e5273dbaa04aef6d486b5b90c00f95d02415965029c10f4b7e6bda598fc8d0c
GET /officeonline/we/s/h1E5273DBAA04AEF6_resources/1033/RowResize.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4286
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:51:19 GMT
x-ms-request-id: 96a5f6fa-901e-0000-7336-50c202000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368763,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7b&TotalRTCDNTime=1&CompressionType=&FileSize=4286"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur
2.2 kB URL res-1.cdn.office.net/officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @16x21
Hash 40e83bc5d22c7a23066aa9b464d31aba
1646333637a841334449b00f371123bd1b6501d3
a9eb9d74ca2a1d3046ac2cb018629c9c1dc4f18433dc6def6ea8ae5e9d860c18
GET /officeonline/we/s/hA9EB9D74CA2A1D30_resources/1033/ColumnSelect.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2238
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:58:01 GMT
x-ms-request-id: b38962fc-501e-00a6-2c0f-46751c000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368764,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7c&TotalRTCDNTime=1&CompressionType=&FileSize=2238"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur
326 B URL res-1.cdn.office.net/officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur
IP
ASN #20940 Akamai International B.V.
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @20x15
Hash e75bd7914ee3cd4a53a53991cac2df4f
59c0205ffe67456d989fd64beb207432839bd308
3cdd9623189ff53bf6345ec12411b077f66bcf28e11d2149a08a2edeabd9bfbc
GET /officeonline/we/s/h3CDD9623189FF53B_resources/1033/RowSelect.cur HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 326
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:55:14 GMT
x-ms-request-id: c7d54b1b-301e-006b-1405-4645f6000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368766,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7e&TotalRTCDNTime=1&CompressionType=&FileSize=326"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png
379 B URL res-1.cdn.office.net/officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced
Hash cec77a8912d7108335010c33bf6cb916
0038cb6e80aaf4f63422ad800413b14326eb5b27
932fcfffe055aa1d2d2ccaed493e086ecd7c3fd9c8b2034d544b1154d21d36f7
GET /officeonline/we/s/h932FCFFFE055AA1D_resources/1033/TableSelect.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 379
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:56:24 GMT
x-ms-request-id: 7718b63a-101e-0043-1230-49245e000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28368767,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575355.1b0df7f&TotalRTCDNTime=1&CompressionType=&FileSize=379"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c42293ee759dc276fed9a1aec7b1f5ff
5d35518ebac33874fb63d95ea56c3787be7adb2e
46c01c8b4f345937fa1da8ae9b2ce3a68df67aec97a59b1a85c4f111a2e95575
POST /we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 6328
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1110
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5fc70299-af57-4806-8fa7-5a82cb645375
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000020F1
x-wacfrontend: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1322282F6DFA499682A3CAD2F04CC620 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:55 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/rawguids/38412632070
645 kB URL fs.microsoft.com/fs/4.39/rawguids/38412632070
IP
File type TrueType Font data, 24 tables, 1st "GDEF", 58 names, Unicode, � 2020 The Monotype Corporation. All Rights Reserved.
Size 645 kB (645272 bytes)
Hash ebe23717e5fd3be1d5fe7a8a7bf44bdd
8a1070685c7b20e6bf95640624fef98f8168cbdb
29dfdec50c23a86c86c949498ad6b622bc053bc20ff2465ec0d89ea6c41acf02
GET /fs/4.39/rawguids/38412632070 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:39:47 GMT
Accept-Ranges: bytes
ETag: "0x332E9F9736B5E5912AF173374884F738FD0BB6EB99CE97056298A4F855CC4339"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=38412632070; filename*=UTF-8''38412632070
X-MSEdge-Ref: Ref A: 16D94B9006E7481BB322309694E86619 Ref B: LON04EDGE1216 Ref C: 2024-03-27T10:37:13Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=253390
Date: Wed, 01 May 2024 14:55:55 GMT
Content-Length: 645272
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.39/rawguids/37426579782
200 OK 96 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/37426579782
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 17 tables, 1st "LTSH", 47 names, Macintosh, Digitized data copyright The Monotype Corporation 1991-1995. All rights reserved. Book Antiqua�
Hash ab11f25684c1355b95e7c8f40349db3f
b8af461084de763a14a7448dded69086600ead2e
055f18836b6af4545cdb441001a8c02c1494d168f75f90809d1be5d502ce4311
GET /fs/4.39/rawguids/37426579782 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:37:21 GMT
Accept-Ranges: bytes
ETag: "0xCCCD589BD13C7442AB3C20AC697A784D68BBF1DAFC4A7A9FB6C00B6F074F4E0E"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=37426579782; filename*=UTF-8''37426579782
X-MSEdge-Ref: Ref A: 62260DA544104E20ABEF4C391109E014 Ref B: LON04EDGE1110 Ref C: 2024-03-28T07:31:16Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=97261
Date: Wed, 01 May 2024 14:55:55 GMT
Content-Length: 95944
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.39/rawguids/54730426722
513 kB URL fs.microsoft.com/fs/4.39/rawguids/54730426722
IP
File type TrueType Font data, 23 tables, 1st "GDEF", 83 names, Unicode, � 2020 The Monotype Corporation. All Rights Reserved.
Size 513 kB (513215 bytes)
Hash 4c7104334368817ab6f1d2dc34acd55f
c9645aac5ba761e5da7333b154a9027a260bd435
445eba6ad4f9c5a29a3f5b880f85a52c421c9abe74b48b405b7200f63315b293
GET /fs/4.39/rawguids/54730426722 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:37:08 GMT
Accept-Ranges: bytes
ETag: "0xD5B5AA27A77D0CE2E21121C521F456480B7869E19A1C3A71A88CFC0DE40B2A6E"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=54730426722; filename*=UTF-8''54730426722
X-MSEdge-Ref: Ref A: 410D5BD8BF6948B4A14568EE0D2384FA Ref B: LON04EDGE1014 Ref C: 2024-03-27T08:09:40Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 513215
Cache-Control: public, max-age=30598
Date: Wed, 01 May 2024 14:55:55 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.39/rawguids/36853217267
200 OK 636 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/36853217267
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 24 tables, 1st "GDEF", 83 names, Unicode, � 2020 The Monotype Corporation. All Rights Reserved.
Size 636 kB (635662 bytes)
Hash 7b7191d71e40cf7e31f956c001973042
92741dc7e4be84c3ce253dd21e074fda2f4a5b21
dd1d08bb79f57c727f9962b99120dc8047f2224ee366c8eadc3e3bc4ff01dd8b
GET /fs/4.39/rawguids/36853217267 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:37:21 GMT
Accept-Ranges: bytes
ETag: "0xE0037E940E95A7B9508B5764ACAC304F38556A26F4A60B84D75E8B1ED2490388"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=36853217267; filename*=UTF-8''36853217267
X-MSEdge-Ref: Ref A: E40523290D9A468EBEE0F0EE6CAC4C82 Ref B: LON04EDGE1211 Ref C: 2024-03-27T08:09:27Z
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=11700
Date: Wed, 01 May 2024 14:55:55 GMT
Content-Length: 635662
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
200 OK 23 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 06 Apr 2024 01:34:38 GMT
x-ms-request-id: 02a34241-701e-0064-67cf-890e0f000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28370700,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0e70c&TotalRTCDNTime=2&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 968b72dc-201e-0015-0f72-4cd5b1000000
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28370701,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0e70d&TotalRTCDNTime=2&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2963
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: c028d86f-c098-4eea-9b56-d1d8e04b5276
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7EE
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 38057AAC888546B985A2986AD9263BE1 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:55Z
date: Wed, 01 May 2024 14:55:55 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false
9.3 kB URL word-edit.officeapps.live.com/we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 222x276, components 3
Hash 719d7c4df27cfed3ed286133bf2a1bb0
a346b66fe519edff5f29434de246132242bbe70c
094e6696f10ea4ba70356b4650b7a4f20928b00a219f830bbc50ee9df61b8dd1
GET /we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 9288
content-type: image/jpeg
content-encoding: gzip
expires: Thu, 01 May 2025 14:55:56 GMT
etag: "WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%2DWDwR%2DejDGuKy0DcRLdCpcgaxRBy7%5FLeEGJ74YU6KDF3LKsljolLt%2DSPDcczGNDorQa0%5Ff6eUe7%5F79DPAKe%5FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%2DXzS8WjNHf05ov%2DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%5FONFcw4VTMHsfJZdGcOBwQ%2DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639{00ff65d8-db56-5757-889d-f47675d5dd92}{1}"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 46ad7dd1-d982-41a6-9272-8db19f52aad0
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002210
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002210
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 11F9E03155B2409F84E123B3D8E89C23 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:55Z
date: Wed, 01 May 2024 14:55:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 06 Apr 2024 01:34:17 GMT
x-ms-request-id: ff891282-801e-004f-17f4-898ec3000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28370702,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0e70e&TotalRTCDNTime=2&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
32 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28370703,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0e70f&TotalRTCDNTime=2&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65346)
Hash b49801c769b0800be021633e623ecaf5
59c0f562e0927b2522daa3bd18faa9cf03d9efdc
ba1a3d84e1a8d86a082b38b14a17d8a5b853f344f95585c98de41de2e1d8ca96
GET /officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28108
last-modified: Mon, 08 Jan 2024 13:12:32 GMT
x-ms-request-id: 5410c833-601e-001a-1a20-6c9e48000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28370704,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0e710&TotalRTCDNTime=2&CompressionType=br&FileSize=28108"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD3859B24AA34B98A_App_Scripts/WordEditorDS.customerfeedback.js
42 kB URL res-1.cdn.office.net/officeonline/we/s/hD3859B24AA34B98A_App_Scripts/WordEditorDS.customerfeedback.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (593)
Hash c9643fe9c5e9158f152c54bc22dfe65b
c02571a25a8df1c3dd030c61ee0f2009ba6a5e76
d3859b24aa34b98a8929101740ba4a38c761d8658fbd1a197b1e1839577b8117
GET /officeonline/we/s/hD3859B24AA34B98A_App_Scripts/WordEditorDS.customerfeedback.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41898
last-modified: Fri, 26 Apr 2024 01:41:49 GMT
x-ms-request-id: 8da0bc4b-801e-0060-33a1-978308000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28371569,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0ea71&TotalRTCDNTime=2&CompressionType=br&FileSize=41898"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false
9.3 kB URL word-edit.officeapps.live.com/we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 222x276, components 3
Hash 719d7c4df27cfed3ed286133bf2a1bb0
a346b66fe519edff5f29434de246132242bbe70c
094e6696f10ea4ba70356b4650b7a4f20928b00a219f830bbc50ee9df61b8dd1
GET /we/GetImage.ashx?&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&ObjectDataBlobId=%7B00ff65d8-db56-5757-889d-f47675d5dd92%7D%7B1%7D&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&Word=1&lcSessionId=2B0FF163-0375-4381-A6D9-900D68CC9F2E&lcMachineId=BN3PEPF0000214F&lcClusterId=PUS3&lcLineageId=CF46136D-72E9-4A77-B318-DD71F962787A&lcUseWacii=7372928&lcBackup=true&DataUrlEnabled=false HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 9288
content-type: image/jpeg
content-encoding: gzip
expires: Thu, 01 May 2025 14:55:56 GMT
etag: "WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ%2EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%2DWDwR%2DejDGuKy0DcRLdCpcgaxRBy7%5FLeEGJ74YU6KDF3LKsljolLt%2DSPDcczGNDorQa0%5Ff6eUe7%5F79DPAKe%5FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%2DXzS8WjNHf05ov%2DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%5FONFcw4VTMHsfJZdGcOBwQ%2DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639{00ff65d8-db56-5757-889d-f47675d5dd92}{1}"
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b882b591-544a-426c-ad82-349456b9fae7
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 5D5C77E7456C43F0BEAAD3C7F63C2AFA Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:55Z
date: Wed, 01 May 2024 14:55:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hD9A2ED8AB7143ECA_App_Scripts/wp5/editorSettingsManager.min.js
200 OK 69 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hD9A2ED8AB7143ECA_App_Scripts/wp5/editorSettingsManager.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65387), with no line terminators
Hash e209729fa7c96e1ee61492ef758abfd1
c3e0810ebea22b1341c6c5d131a3fd4df1cc9efc
d9a2ed8ab7143eca661de5fb41d62c3bba810cacf39148f5661a7ae88bdc44d9
GET /officeonline/we/s/hD9A2ED8AB7143ECA_App_Scripts/wp5/editorSettingsManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68708
last-modified: Wed, 24 Apr 2024 16:32:10 GMT
x-ms-request-id: 204cc36e-701e-0039-019c-97048b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28371575,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0ea77&TotalRTCDNTime=2&CompressionType=br&FileSize=68708"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44BC844386123A2E_App_Scripts/WordEditorDS.augloop.js
69 kB URL res-1.cdn.office.net/officeonline/we/s/h44BC844386123A2E_App_Scripts/WordEditorDS.augloop.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (588)
Hash 21bc5a63591c9202bbec70221de4bb54
9fba734b5eaec61a77510bbc9d524d313575e492
44bc844386123a2e393b4e19d388695354a669d8b5241e167cb674dedb78ae98
GET /officeonline/we/s/h44BC844386123A2E_App_Scripts/WordEditorDS.augloop.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68983
last-modified: Fri, 26 Apr 2024 01:41:52 GMT
x-ms-request-id: f4b1ea9e-701e-0016-489c-970940000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28371576,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575356.1b0ea78&TotalRTCDNTime=2&CompressionType=br&FileSize=68983"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false
200 OK 9.4 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 441 x 143, 8-bit/color RGBA, non-interlaced
Hash 7764cff92c46aa0a33cea2451ac28a7a
f10ffd89e48c93c0b4606ddcfe81b4d2a2db95a4
6aa557b8c04b2f3ff639698524881adbe0b1a104de06d57347e9b0b729f5d09b
GET /we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 9356
content-type: image/png
expires: Thu, 01 May 2025 14:55:56 GMT
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0d82ef59-1de0-4a84-8de5-976dd244e4a0
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000020F1
x-wacfrontend: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: C3C66354B84845788F567096C987805A Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:56Z
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false
200 OK 9.4 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type PNG image data, 441 x 143, 8-bit/color RGBA, non-interlaced
Hash 7764cff92c46aa0a33cea2451ac28a7a
f10ffd89e48c93c0b4606ddcfe81b4d2a2db95a4
6aa557b8c04b2f3ff639698524881adbe0b1a104de06d57347e9b0b729f5d09b
GET /we/ResReader.ashx?v=00000000-0000-0000-0000-000000000014&n=E2o2.img&rndm=ad6e8c76-cfd3-4760-b11b-ab5089ecb9ef&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&DataUrlEnabled=false HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 9356
content-type: image/png
expires: Thu, 01 May 2025 14:55:56 GMT
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 63d82289-18a0-43d6-b617-3243e8f71cd6, 63d82289-18a0-43d6-b617-3243e8f71cd6
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998, 42137490-9be7-4216-bccc-7baed0659998
timing-allow-origin: *, *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002210
x-wacfrontend: BN3PEPF000020F1
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 745337D4AE204C36B59BF5E64EA814FD Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:56Z
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
92 kB URL fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 101x101, segment length 16, baseline, precision 8, 1572x1572, components 3
Hash 67bdb7326254341391bd03f9d82dfbba
05aa1521932ce3963df5eebf712e8a0884c324d0
516e73307371ea36709c7c733e5c0a9fbb09bc4a6be352fbc45164e3cbf6cdd6
GET /f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 00:45:07 GMT
etag: "0xB1FF082B44D7FE3FEA021B93FB418F6D44754EAA795392F997D6B8724D141098"
content-length: 91945
content-type: application/octet-stream
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0co6FYwAAAADdg1CRKDOZRoPt14QKMhkbTE9OMjFFREdFMTgxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
cache-control: public, max-age=59786
date: Wed, 01 May 2024 14:55:56 GMT
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/current/version.json
200 OK 78 B URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/current/version.json
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash 4b7618935095fee064d1a483af8c0f58
b4a39ddfcfbf5403bea0cb60708893e545f81c2a
496a9b125ccbbf655309be34411219048c2d0f09778b8601965a6b6f390c6454
GET /mirrored/smartlookup/current/version.json HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 78
Content-Type: application/json
Content-MD5: S3YYk1CV/uBk0aSDr4wPWA==
Last-Modified: Fri, 26 Apr 2024 17:35:27 GMT
ETag: 0x8DC661742EE95D6
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c47bc078-801e-005f-6f00-986e18000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Cache-Control: max-age=151
Expires: Wed, 01 May 2024 14:58:27 GMT
Date: Wed, 01 May 2024 14:55:56 GMT
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
6.0 kB URL word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (17397), with no line terminators
Hash c496dbe38ef25e1c070f107c2da8fd07
aa8355e7afb71ed4380d4fcf756d754e34f94dc7
aecf94478b161285a97a0a39b411a578c477fb2ab39ed2738b570b9c737ebb1f
GET /we/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5965
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 30 Apr 2024 21:50:38 GMT
accept-ranges: bytes
etag: "04b270489bda1:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 69ca5d2f-a5ee-47b6-9e65-f295dd40dd6d
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002087
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF00002087
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: FD4F06C82EA4452A9FF767E0571E2AF9 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:56Z
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash 72a0f4af735effda54dce67d1eda7919
827a1d4412584d704740ca9c9e601570a3f919f4
12e30b420520de0dd0c85adc6b9afe4f6369ef93f0895b2707ea8ede23eeb568
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714575349290
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 11887
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=8fe6e67a3d834e6892f13c309678485f&HASH=8fe6&LV=202405&V=4&LU=1714575356850; Domain=.microsoft.com; Expires=Thu, 01 May 2025 14:55:56 GMT; Path=/;Secure; SameSite=None
MS0=978ab468848344a486ff9048f15918ca; Domain=.microsoft.com; Expires=Wed, 01 May 2024 15:25:56 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 7560
access-control-allow-headers: P3P,Set-Cookie,Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h35216072B4ABB1D7_App_Scripts/wp5/uiSlice20.min.js
251 kB URL res-1.cdn.office.net/officeonline/we/s/h35216072B4ABB1D7_App_Scripts/wp5/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 251 kB (250566 bytes)
Hash b9ca299f4f9108d98e9c7fd94f7665b8
34e13e3512f313684a118cd5a4b565206490b0ac
35216072b4abb1d7690df1b40ba3eec55d232cf6b06c0827986b9db4a6377b97
GET /officeonline/we/s/h35216072B4ABB1D7_App_Scripts/wp5/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 250566
last-modified: Wed, 24 Apr 2024 16:31:49 GMT
x-ms-request-id: 717ce039-601e-0057-199c-9751a4000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28373091,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575357.1b0f063&TotalRTCDNTime=2&CompressionType=br&FileSize=250566"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 4c052d25-8361-4f13-a5cd-4a87ba6e007e
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:57 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash 2847c7c127619fbff882a1ae96cbc421
5c77b719c6bd36fe1cdb566cdde32a8cac5f95c0
349fce0bbae039037f0d352636898937020006b38ca4b8dbf5542b802404815d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714575350731
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1875
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; Domain=.microsoft.com; Expires=Thu, 01 May 2025 14:55:57 GMT; Path=/;Secure; SameSite=None
MS0=2c6f1e10602849e2b29484e974662d29; Domain=.microsoft.com; Expires=Wed, 01 May 2024 15:25:57 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 6369
access-control-allow-headers: P3P,Set-Cookie,Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.39/rawguids/38986015697
865 kB URL fs.microsoft.com/fs/4.39/rawguids/38986015697
IP
File type TrueType Font data, 21 tables, 1st "EBDT", name offset 0x145408
Size 865 kB (864823 bytes)
Hash 22ac58254015720a8d154004ecc8bddc
ad7a827f5ef7394531056af20df78b9d4ced7184
fe3fffced443e818b658b178ceb9ee68a281f9f519459180f37e4120a1ab5114
GET /fs/4.39/rawguids/38986015697 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:39:47 GMT
Accept-Ranges: bytes
ETag: "0xFC2D4D345C56CAA4C3A94FAA11D7343FA1631122A95D1EFAA2E6DDE483BC5172"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=38986015697; filename*=UTF-8''38986015697
X-MSEdge-Ref: Ref A: 3ADA67C3E27A4A44B7820415658AE8DD Ref B: LTSEDGE1611 Ref C: 2024-03-27T23:53:52Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 864823
Cache-Control: public, max-age=68889
Date: Wed, 01 May 2024 14:55:57 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57227
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 4b826157-868d-4979-b522-18c34a0a229b
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:57 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
200 OK 18 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4de42314d6edda70df9779762acc12b8
2af63137abc68c0910107f8598b7de48fd5bbd9c
7e86df2ac06e3524cb7bc6f0b8eb07565ba6d103eaf3cf1a30ac4c78f11a4eaa
GET /officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18308
last-modified: Fri, 13 Oct 2023 06:20:52 GMT
x-ms-request-id: a1cece7c-101e-002f-48a1-7bf25c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28374923,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575358.1b0f78b&TotalRTCDNTime=2&CompressionType=br&FileSize=18308"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
200 OK 12 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (62133), with no line terminators
Hash 39e15ee4c61a0822733358976e1e1655
fd4177b58d009a2abb059175f2b1c32d1ebad47b
e4a0e7a7ef39f13f511322e90fb4deb5640348da25e2984c2cda9d8b3b7d030d
GET /officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12402
last-modified: Tue, 11 Apr 2023 08:47:53 GMT
x-ms-request-id: d995ab1a-b01e-0009-49d3-6fba44000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28374924,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575358.1b0f78c&TotalRTCDNTime=2&CompressionType=br&FileSize=12402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: b01530e8-1d41-4aa5-82c9-32f745343401
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 9341
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 0d3822ce-d2df-4e96-94e3-525eb9aad435
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:55:58 GMT
content-length: 0
X-Firefox-Spdy: h2
augloop.office.com/
0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6A+TBImRVlgJW+yq7cWrnQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/2 200 OK
date: Wed, 01 May 2024 14:55:58 GMT
server: Kestrel
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-origin: 071512A400ABE6145A9BBD48CFDD87B39B10C1963F4FE5C699A0977C292B7D13
x-rp-instance: _D2Worker_197
x-rp-routeid: v2Route
x-rp-clusterid: BackendMastermindMain
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com
200 OK 112 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (56433), with CRLF, LF line terminators
Size 112 kB (111966 bytes)
Hash 87fcc16b34836d731e4fe3d7d9cc6c5b
11429f924a644f1be81dca580c8e18060d276403
85825a99f71ffb0d82eece73b257ec2fc083e5a096eeca248c7b7556d122e278
GET /mirrored/smartlookup/2024.4.27908129/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-MD5: h/zBazSDbXMeT+PX2cxsWw==
Last-Modified: Fri, 26 Apr 2024 01:47:29 GMT
ETag: 0x8DC6592D52283D5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 492ad300-e01e-0059-6bfe-975da7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 111966
Cache-Control: max-age=31112973
Expires: Sat, 26 Apr 2025 17:25:31 GMT
Date: Wed, 01 May 2024 14:55:58 GMT
Connection: keep-alive
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/we/s/h107724CCCD8A0E2F_App_Scripts/WordEditorDS.collab.js
63 kB URL res-1.cdn.office.net/officeonline/we/s/h107724CCCD8A0E2F_App_Scripts/WordEditorDS.collab.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1024)
Hash 97558e4d8f1227ccac0222c12ca8dcbf
f2efbc38e5f7c35f3e31310d10dd066736883cad
107724cccd8a0e2f83057df230300ea8014ae857d2a52be19bab9b9976ce3c16
GET /officeonline/we/s/h107724CCCD8A0E2F_App_Scripts/WordEditorDS.collab.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 62785
last-modified: Fri, 26 Apr 2024 01:42:52 GMT
x-ms-request-id: ef87027e-e01e-003b-339c-97ba33000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28375932,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575358.1b0fb7c&TotalRTCDNTime=2&CompressionType=br&FileSize=62785"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
435 B URL res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (919)
Hash 7ab5d254e2da17aeca94fde594c24c2b
9abe817d8c937f97b18fada2e49a5ee3490b6ecd
ee4dd6a857fc823c030e07a12e981931c06750872cda3a0a5269aa58511a18a3
GET /officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 435
last-modified: Tue, 19 Dec 2023 09:22:33 GMT
x-ms-request-id: a811fbe8-201e-0093-7ed0-5b1908000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28375954,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575358.1b0fb92&TotalRTCDNTime=1&CompressionType=br&FileSize=435"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
124 kB URL res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65443)
Size 124 kB (124317 bytes)
Hash b080f97954965444052cd61325d21dc8
41ffbbe96b017b712500685978f64c60f3e913c5
ce3684421dc976318d15c8ffb8cd744b6412c18942451921508b749260291e93
GET /officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 124317
last-modified: Thu, 11 Apr 2024 01:39:06 GMT
x-ms-request-id: f1a5f610-e01e-0049-6d76-8dbd7c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:58 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28376162,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575358.1b0fc62&TotalRTCDNTime=2&CompressionType=br&FileSize=124317"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js
200 OK 715 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (16593)
Size 715 kB (715354 bytes)
Hash f5c5b644d2dcaa8d861b4baf8a2e4d6f
75820a5f4bec32399ea5c896e1c5b59e395f5d41
c87ab3478134c29a136f20738cedafef6c6db28aef99daf3a82598777e5cab80
GET /mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.ssr.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: 9cW2RNLcqo2GG0uvii5Nbw==
Last-Modified: Fri, 26 Apr 2024 01:47:39 GMT
ETag: 0x8DC6592DB37663F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e1dfddb8-601e-008c-5dc2-97b22a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=31087187
Expires: Sat, 26 Apr 2025 10:15:45 GMT
Date: Wed, 01 May 2024 14:55:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js
80 kB URL uci.cdn.office.net/mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js
IP
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 156b8cc34017824c929617c5f9ba88ff
0d5123880fe16096614324f95bb33c070e7386c4
a2dc73cedf8e2e5eb70909b1acf7170b4c043450faec3ef1f05e95391e5d621b
GET /mirrored/smartlookup/2024.4.27908129/scripts/microsoft.office.smartlookup.host.runtime.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: FWuMw0AXgkySlhfF+bqI/w==
Last-Modified: Fri, 26 Apr 2024 01:47:38 GMT
ETag: 0x8DC6592DA9C0030
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 42e0484d-501e-003e-47fe-974d5b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=31112823
Expires: Sat, 26 Apr 2025 17:23:01 GMT
Date: Wed, 01 May 2024 14:55:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 3999
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4cd9a69e-45a0-4ccb-841a-60486a8f5789
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7E9
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D7A26552DC8F4B0CAB0F65BCD9A96A5B Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:58Z
date: Wed, 01 May 2024 14:55:58 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Wed, 01 May 2024 14:55:58 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hA7047FA92C422E54_App_Scripts/wp5/canvasContextual.min.js
98 kB URL res-1.cdn.office.net/officeonline/we/s/hA7047FA92C422E54_App_Scripts/wp5/canvasContextual.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash d2be53b0d38fbe6a4c80bf4902e4ef43
5f9be424430beb5d6dc92da9638cab3bc0c5b2c7
a7047fa92c422e542cc939bb1999220c6f48999ca070e713a8e4e3f00c2a1639
GET /officeonline/we/s/hA7047FA92C422E54_App_Scripts/wp5/canvasContextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 97475
last-modified: Wed, 24 Apr 2024 16:32:09 GMT
x-ms-request-id: 6cb6c186-701e-005b-029c-97c6ac000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28377847,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b102f7&TotalRTCDNTime=2&CompressionType=br&FileSize=97475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
3.6 kB URL res-1.cdn.office.net/officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (14645), with no line terminators
Hash 194022eefcd02f7a290404142be40ff8
0cb7dffed103105ef3467eb9042d6b52b1804b1c
2f662e2edb3b28a763e9600e528e608fa51efeed668091ecba064a097bcdd8b2
GET /officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3595
last-modified: Fri, 29 Dec 2023 18:34:04 GMT
x-ms-request-id: 547310a8-901e-004d-7dea-5c0dee000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28377848,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b102f8&TotalRTCDNTime=2&CompressionType=br&FileSize=3595"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h274A06E325DF9470_App_Scripts/wp5/sharedCommentsLazy.min.js
102 kB URL res-1.cdn.office.net/officeonline/we/s/h274A06E325DF9470_App_Scripts/wp5/sharedCommentsLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (101933 bytes)
Hash f47e8d30b9da6c3555166dc5004f7f43
e55dd94540734040c42ef899eef1ff368cf3a7dd
274a06e325df94703e7e489e9091630794f251a5d920a1af283836c3179cc099
GET /officeonline/we/s/h274A06E325DF9470_App_Scripts/wp5/sharedCommentsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 101933
last-modified: Wed, 24 Apr 2024 08:39:00 GMT
x-ms-request-id: 99fe3486-f01e-0037-3b9c-972d3b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28377849,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b102f9&TotalRTCDNTime=2&CompressionType=br&FileSize=101933"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
47 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (48867)
Hash 3738e9b47e1dde6812bd34b2ed239e74
60f3d074ea13d66ee119f05a355c81b4a6ecd3d1
e726b46d4fb102ce1ce6390e1868c1fefb9f67aba2ab89473f986a7329133763
GET /officeonline/we/s/161762541013_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47400
last-modified: Fri, 26 Apr 2024 01:42:14 GMT
x-ms-request-id: 283bf921-101e-003f-1a9c-973734000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28378311,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b104c7&TotalRTCDNTime=2&CompressionType=br&FileSize=47400"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
6.0 kB URL res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Hash dafc4882dfe094df49b427b41a356259
1e27a30b5410ed69280b435b088d93d5b8f0cbb1
350219d5c32123e7feb87e7bd4655d4382ad246d036d395872f01896aaa9d378
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: b188037e-da1b-4878-889f-ebbf6f6503c1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
content-length: 6044
akamai-request-bc: [a=95.101.10.205,b=28378310,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b104c6&TotalRTCDNTime=2&CompressionType=&FileSize=30746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
73 kB URL res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (59507)
Hash a311f770c3973e57c94c2b422478c8d2
ee3fa09f670d0da585ffcb82b247ab819930493f
87dd4d145ac732a457802a9c3c200e8083761de49a6a520ae67969db3392096c
GET /officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 73212
last-modified: Tue, 14 Nov 2023 14:26:32 GMT
x-ms-request-id: 1f22b74b-901e-0021-714d-7bdbec000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28378313,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b104c9&TotalRTCDNTime=2&CompressionType=br&FileSize=73212"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 036bd0e2-801e-004f-5c65-7a8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28378730,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b1066a&TotalRTCDNTime=1&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
122 kB URL word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Size 122 kB (122080 bytes)
Hash 5cf3922f9fba75164396c992a2081fa3
fd569c56540248447bb1d3972bf03d7dcc10ba21
f2c9deae6b182b0f49857369f7480645f33c52248d6debbefd0661d6d1b8db1a
GET /we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 823e03ab-6d05-409d-ab09-45ba5f8ca24f
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000021BE
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF000021BE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1FCDD83D93CC463FA538A22997F0159E Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:56Z
date: Wed, 01 May 2024 14:55:56 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h04357F6E3A4E2D88_App_Scripts/WordEditorDS.worker.js
564 kB URL res-1.cdn.office.net/officeonline/we/s/h04357F6E3A4E2D88_App_Scripts/WordEditorDS.worker.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (677)
Size 564 kB (564522 bytes)
Hash e8be3c082e2857049ca0ee547dd34d24
8cb033a6b70e33529bee6882a6812712cb2f692d
04357f6e3a4e2d887e65eebff11f5359ca098ada4b89da2c53006a02157d4aa6
GET /officeonline/we/s/h04357F6E3A4E2D88_App_Scripts/WordEditorDS.worker.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 564522
last-modified: Fri, 26 Apr 2024 01:41:54 GMT
x-ms-request-id: 0b2e5373-101e-005d-6b9c-97f513000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28378731,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b1066b&TotalRTCDNTime=1&CompressionType=br&FileSize=564522"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 52af792134b43bb66ac6fb020ec0b324
7b8a12118ee106daa8fcece7625d1de871835a21
e08ca1be8adf907921f594f700e9267582333ba0a4337c820e8c937989301574
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4407
last-modified: Fri, 26 Apr 2024 01:51:32 GMT
x-ms-request-id: 376afc30-901e-000e-459c-97d627000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28379307,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575360.1b108ab&TotalRTCDNTime=2&CompressionType=br&FileSize=4407"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Wed, 01 May 2024 14:55:59 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hB50825D6644FFEF2_App_Scripts/WordEditorDS.box4.dll2.js
200 OK 196 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hB50825D6644FFEF2_App_Scripts/WordEditorDS.box4.dll2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (603)
Size 196 kB (195933 bytes)
Hash dcc1bef7c8ff4fddbd98102ce60c2328
dc61acf0014e22cc0ea6e89ff6632e5a545a4f57
b50825d6644ffef24d56706ff57aaf50087e4c5ae3d752f12e939044a672743b
GET /officeonline/we/s/hB50825D6644FFEF2_App_Scripts/WordEditorDS.box4.dll2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 195933
last-modified: Fri, 26 Apr 2024 01:43:02 GMT
x-ms-request-id: c1940cc9-501e-0001-3f9c-97a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28380409,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575360.1b10cf9&TotalRTCDNTime=2&CompressionType=br&FileSize=195933"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
augmentation.osi.office.net/officeaugmentation/searchendpointv4/
200 OK 34 B URL POST HTTP/2 augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectaugmentation.osi.office.net
Fingerprint39:4F:9B:1A:64:4C:35:1F:18:2B:4B:E1:04:34:B0:47:F8:B3:7B:7F
ValiditySun, 31 Mar 2024 07:16:27 GMT - Wed, 26 Mar 2025 07:16:27 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-correlationid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: text/plain; charset=utf-8
content-encoding: gzip
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_29
x-officeversion: 16.0.17623.42625
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 4dd5052d-8715-48b3-ad19-cc65e65e2679
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: POST
access-control-allow-headers: content-type,x-correlationid
access-control-max-age: 86400
access-control-expose-headers: *
x-officeprocessid: 1216
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Wed, 01 May 2024 14:56:00 GMT
content-length: 34
X-Firefox-Spdy: h2
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ
200 OK 0 B URL OPTIONS HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE3
x-userhostaddress: 91.90.42.0
x-correlationid: b7b29dba-b866-4555-83f9-f9bedf041b4b
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
x-officefe: AM1PEPF00025BE3
x-officeversion: 16.0.17624.41001
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
access-control-allow-headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F5A2F7CFA0714F1695AF96CBF1DC31EE Ref B: SVG20EDGE0416 Ref C: 2024-05-01T14:56:00Z
date: Wed, 01 May 2024 14:56:00 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 22821c7f-d0c7-4f40-bfb3-652277a87eec
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:00 GMT
content-length: 0
X-Firefox-Spdy: h2
augmentation.osi.office.net/officeaugmentation/searchendpointv4/
200 OK 58 B URL POST HTTP/2 augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectaugmentation.osi.office.net
Fingerprint39:4F:9B:1A:64:4C:35:1F:18:2B:4B:E1:04:34:B0:47:F8:B3:7B:7F
ValiditySun, 31 Mar 2024 07:16:27 GMT - Wed, 26 Mar 2025 07:16:27 GMT
Hash 8ba6db3c74a8722bad76ce3bf0ad7ca9
f3f42b729703f2b384aa24edc983dab5cb90688c
504bdd02dbdda1a38e0cf742c53f482f0543576138acdde3c8cee833f6fb4eae
POST /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-correlationid: 05ec9ea2-ed35-45e9-9a19-da76679eb9ed
Content-Length: 39
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-encoding: gzip
etag: W/"18-8/QrcpcD8rOEqiTtyYPatcuQaIw"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_29
x-officeversion: 16.0.17623.42625
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 05ec9ea2-ed35-45e9-9a19-da76679eb9ed
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With
access-control-max-age: 600
access-control-expose-headers: *
x-officeprocessid: 11740
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Wed, 01 May 2024 14:56:00 GMT
content-length: 58
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
76 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Hash bd4fd54157011269672f3f087d69db84
d0a284fdf9c1130c2b46617dc95548a9d4bfab28
b468a47f17a0dcb252993ca6b79a5846ec8a093092dde29788fc5c50a0392ed4
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76108
last-modified: Fri, 26 Apr 2024 01:50:09 GMT
x-ms-request-id: aa903352-001e-0041-739c-97a773000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28381205,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575360.1b11015&TotalRTCDNTime=2&CompressionType=br&FileSize=76108"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 47499
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 49f7caf1-9309-4f82-9e90-5e821a8df6df
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:00 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
3.4 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (11364), with no line terminators
Hash d39049fe6408eb9e7755dcbdaf4a7fd8
ec4e643ccd31cd401a37e4421775ce6db14f17e4
37d31aff816c37f4e8c8b916f4028ca4ee2ba999c9f6018dacac39b3c5681b11
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3410
last-modified: Fri, 26 Apr 2024 01:50:08 GMT
x-ms-request-id: b0fa47c4-f01e-0008-360a-9ae598000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:00 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28381372,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575360.1b110bc&TotalRTCDNTime=2&CompressionType=br&FileSize=3410"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
2.9 kB URL res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (20551), with no line terminators
Hash 3d6ca9b0358bef8348220f958f049b61
8b85c3925fbc3d51e57658845a80c67f2101cc26
8d7b8c265df55db9c4be132ca6fe1ceebb0cfe89aa47992738cab92285c3afad
GET /officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2880
content-type: text/css
last-modified: Mon, 24 Jul 2023 22:26:48 GMT
x-ms-request-id: add96b68-e01e-002b-4147-6a7f5b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28381453,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575361.1b1110d&TotalRTCDNTime=1&CompressionType=br&FileSize=2880"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/we/s/161762541013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 786
last-modified: Fri, 26 Apr 2024 01:51:57 GMT
x-ms-request-id: 33c03b73-201e-0046-17a1-97cb10000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28381468,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575361.1b1111c&TotalRTCDNTime=2&CompressionType=br&FileSize=786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
200 OK 294 B URL GET HTTP/2 ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectecs.office.com
Fingerprint2C:34:3B:6E:1C:5E:55:9E:59:6A:13:FA:30:93:99:62:C7:BF:93:0D
ValiditySat, 30 Mar 2024 15:48:20 GMT - Tue, 25 Mar 2025 15:48:20 GMT
Hash 97c839540ba1531febdfdc981cab858c
bb4c260e1af04be3aacfaabb64f4be3805baf286
b35dae33ec11bba7ad17d29fcb868513b9b4354da20048b9d6335247d001490a
GET /config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 294
content-type: application/json
content-encoding: br
expires: Wed, 01 May 2024 15:56:01 GMT
etag: "8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=OneShell&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://word-edit.officeapps.live.com
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 992866523EB2402598323AB69E17CF58 Ref B: OSL30EDGE0306 Ref C: 2024-05-01T14:56:01Z
date: Wed, 01 May 2024 14:56:00 GMT
X-Firefox-Spdy: h2
ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17625.41013&language=en-US
2.6 kB URL ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17625.41013&language=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectecs.office.com
Fingerprint2C:34:3B:6E:1C:5E:55:9E:59:6A:13:FA:30:93:99:62:C7:BF:93:0D
ValiditySat, 30 Mar 2024 15:48:20 GMT - Tue, 25 Mar 2025 15:48:20 GMT
Hash 80882570bf51ffedfd9dd3bf21ab6f9c
8da917e12767ff5c2affabbf4903ee702d879ca4
3696309e168d1676029b135da893190984a4c660a092be63f1bc8029554c6a78
GET /config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online%20Consumer&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17625.41013&language=en-US HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 2592
content-type: application/json
content-encoding: br
expires: Wed, 01 May 2024 15:56:01 GMT
etag: "b61+X9sEfZrHE0yQxcgSsu/wUwJo5fisAZBjeEj59JQ="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=CHILL&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://word-edit.officeapps.live.com
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0976EA967E3B470C9018BAA7CEB32120 Ref B: OSL30EDGE0306 Ref C: 2024-05-01T14:56:01Z
date: Wed, 01 May 2024 14:56:00 GMT
X-Firefox-Spdy: h2
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ
200 OK 2.8 kB URL OPTIONS HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 9f9057a6e886d5536ffff8b95f8ba1ba
3cfa2a302b02d3fe4f98f81268077b8bcc9f0e01
1d975bef35f8b40ff6d9f9e2b042292aa28e976a4856cff468e584df6eb3e470
GET /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&ClientId=%7B42137490-9be7-4216-bccc-7baed0659998%7D&usid=42137490-9be7-4216-bccc-7baed0659998&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-CorrelationId: 5935e23d-91fd-4529-868d-084e3d1bdcec
RTC-TokenProofkey: True
RTC-IsWacJsBootFsRequest: True
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, max-age=31535999
pragma: no-cache
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PUK2
x-frontend: RtcNetCoreLB1
x-machinename: LN2PEPF0000F4EC
x-userhostaddress: 91.90.42.0
x-correlationid: 5935e23d-91fd-4529-868d-084e3d1bdcec
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
x-officefe: LN2PEPF0000F4EC
x-officeversion: 16.0.17624.41001
x-officecluster: PUK2
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: LN2PEPF0000F4EC
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E6F5187E6F374C1BAE60AF15E89A4601 Ref B: SVG20EDGE0416 Ref C: 2024-05-01T14:56:00Z
date: Wed, 01 May 2024 14:56:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hD63C785C19C2A0D8_App_Scripts/WordEditorDS.box4.dll3.js
406 kB URL res-1.cdn.office.net/officeonline/we/s/hD63C785C19C2A0D8_App_Scripts/WordEditorDS.box4.dll3.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1031)
Size 406 kB (406169 bytes)
Hash d55adecfc4eaab98f37dfcc44a3f0aee
8981bcee480d529dbeda9576e4a3c4ba5dc24db6
d63c785c19c2a0d822f97e7ba70f91b4b4b3d22e7a3c93ef4d5214b02879d93d
GET /officeonline/we/s/hD63C785C19C2A0D8_App_Scripts/WordEditorDS.box4.dll3.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 406169
last-modified: Fri, 26 Apr 2024 01:43:19 GMT
x-ms-request-id: 717d21de-601e-0057-5b9c-9751a4000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28382288,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575361.1b11450&TotalRTCDNTime=2&CompressionType=br&FileSize=406169"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
admin.microsoft.com/admin/api/uxversion?bldVer=v1
200 OK 2.3 kB URL OPTIONS HTTP/2 admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash fa25a88145828e4f344426503714be3a
f3dcc3d9e57a34101faf0d033890a72793ded5e9
fb2dc73bcf46a340b1305eb2e6ed550f2f0f0c61e7f66327d1eb06b068934aaa
GET /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ms-mac-locale: en
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2257
content-type: application/json; charset=utf-8
expires: -1
set-cookie: s.SessID=94b26d4d-6bb8-4158-a640-9d827d826d36; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=94b26d4d-6bb8-4158-a640-9d827d826d36; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 2694c0d7-1b39-4855-8d26-542a25d1ec61
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2E08B4B9613F4C309F2CC0611E86EEEB Ref B: SVG20EDGE0115 Ref C: 2024-05-01T14:56:01Z
date: Wed, 01 May 2024 14:56:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
172 B URL res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 65fa61cef49b9974e35e245315921862
094b9cc55975f54908c7e3646096c9cf2c15a7f4
5be2bf596c624f4f9d12b0a2ff70807756a6a908a20897bbf1ac0bc4ebb24d16
GET /officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16640
last-modified: Tue, 11 Apr 2023 08:47:11 GMT
x-ms-request-id: a22274c5-001e-000c-804c-7b689f000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:55:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28378316,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575359.1b104cc&TotalRTCDNTime=2&CompressionType=br&FileSize=16640"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
200 OK 47 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (42919)
Hash d8153fbc27e90b6b135f4e052387c0a3
5fd83ab87c1bbc01e5eb9d3f2756f4514e98df89
2cabf7f8ac4b1f1a8309a72b060939fd95fee987a3304c1cf505d62cd1deb87a
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47298
last-modified: Fri, 26 Apr 2024 01:50:09 GMT
x-ms-request-id: aa905448-001e-0041-099c-97a773000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28383362,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575361.1b11882&TotalRTCDNTime=2&CompressionType=br&FileSize=47298"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
200 OK 259 kB URL GET HTTP/3 res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12695)
Size 259 kB (258890 bytes)
Hash 574fd73194781626aca55c81f59d43f6
c83c3630eb878ca247e0c6235d674277271fec69
a7c7314646ad30c6042053cc2d4ddcf0daad63d0f4826a68c6237ef260d48c93
GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 258890
last-modified: Mon, 22 Apr 2024 19:13:12 GMT
x-ms-request-id: 57dc8c94-301e-0017-601e-95569c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28383359,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575361.1b1187f&TotalRTCDNTime=1&CompressionType=br&FileSize=258890"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358055
2.0 kB URL pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%252EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358055
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 93f22519301996f5fdb92ecee5f8cbba
d991e22221b9382627c2f93eac902a87ff9f6a04
db2bccd53446b8136edf281a76f8ab81c05f96dc2107dc4a56baff15bc09fb34
GET /rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358055 HTTP/1.1
Host: pus8-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PUS8
x-frontend: RtcNetCoreLB1
x-machinename: BN3PEPF00009E6E
x-userhostaddress: 91.90.42.0
x-correlationid: 1e0260e4-c20a-40f8-8e01-799f716f038d
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
x-officefe: BN3PEPF00009E6E
x-officeversion: 16.0.17624.41001
x-officecluster: PUS8
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: BN3PEPF00009E6E
rtcsessionid: 2d7f96f1-4209-44f9-888a-dbf0cbf0f74e
x-officertcproxy: BN3PEPF00009E61
date: Wed, 01 May 2024 14:56:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h81102FD79FB49800_App_Scripts/WordEditorDS.box4.dll4.js
200 OK 109 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h81102FD79FB49800_App_Scripts/WordEditorDS.box4.dll4.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (571)
Size 109 kB (109106 bytes)
Hash b1c75a4cae4e43504baffcace259141e
c6f88c4364ecf12ad86d617cb61e69ce4f0c0e84
81102fd79fb4980011d70a18699dfe213143012dc0014c3184df34cc168f24a3
GET /officeonline/we/s/h81102FD79FB49800_App_Scripts/WordEditorDS.box4.dll4.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 109106
last-modified: Fri, 26 Apr 2024 01:41:51 GMT
x-ms-request-id: 2881ea46-d01e-0030-779c-974158000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28384175,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b11baf&TotalRTCDNTime=2&CompressionType=br&FileSize=109106"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
33 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 89a218ddab054ddc4c43d08ecc0a2d25
2bb4f01c5cd8dae82afccc5a9f5ce35c0f94927f
bd8c3e57a02276353eba9fed640873f0fdb73ab6d582c4b732a53c5f44cc26cf
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32790
last-modified: Fri, 26 Apr 2024 01:50:14 GMT
x-ms-request-id: 82f8e0c4-e01e-002b-259c-977f5b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28384176,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b11bb0&TotalRTCDNTime=2&CompressionType=br&FileSize=32790"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
39 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 0e90fdee574d409a29afaaec5dd66ef5
74555bb3aafaef1197f11f667fb5e1695ecb64a1
b622386f9e168e4a2792860704dfee9f91792d1bd6b5cc73308f0e2499a7fbc3
GET /officeonline/we/s/161762541013_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39359
last-modified: Fri, 26 Apr 2024 01:50:08 GMT
x-ms-request-id: fbbae91f-101e-002f-409c-97f25c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28384177,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b11bb1&TotalRTCDNTime=2&CompressionType=br&FileSize=39359"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
0 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-clientsessionid,x-correlationid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 01 May 2024 14:56:02 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-clientsessionid,x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: 945c163066e17067cd9ce1afd868c0bb
x-servicecorrelationid: 945c1630-66e1-7067-cd9c-e1afd868c0bb
x-machine: OMEXNODE2000000__omexexternal-prod-aue-2-001_0
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 02367010-1bc9-4884-a8c9-a031cb405ada
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714575362133
0 B URL storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714575362133
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714575362133 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714575362&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: DB3PPF447C13BCC
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: WNQCqy0gGU+h9A/7W68wgg.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 4212.9205
X-ClientErrorCode: PassportAuthFail
X-ErrorCodeChain: Unauthenticated
X-AsmVersion: UNKNOWN; 19.1381.322.2019
Date: Wed, 01 May 2024 14:56:02 GMT
Connection: close
pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=0
0 B URL pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=0 HTTP/1.1
Host: pus8-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cgaV9Y0pO4m71mHwBs8Axg==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PUS8
X-FrontEnd: RtcNetCoreLB1
X-MachineName: BN3PEPF0000B394
X-UserHostAddress: 91.90.42.0
X-CorrelationId: 1e0260e4-c20a-40f8-8e01-799f716f038d
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeFE: BN3PEPF0000B394
X-OfficeVersion: 16.0.17624.41001
X-OfficeCluster: PUS8
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://word-edit.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
Sec-WebSocket-Accept: nsoEyL1B4rAMyZ9sEJthdhTUJAc=
Connection: Upgrade
Date: Wed, 01 May 2024 14:56:02 GMT
admin.microsoft.com/api/instrument/logclient
200 OK 0 B URL OPTIONS HTTP/2 admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ms-mac-appid,x-ms-mac-hostingapp,x-ms-mac-version
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=057ad787-dfb8-46bc-943f-00bdd2a02616; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=057ad787-dfb8-46bc-943f-00bdd2a02616; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C6C278A030054DD49C711FB3EC71DB45 Ref B: SVG20EDGE0115 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:01 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 208 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash a4d23edc952bbffc7e0eda35a783d80c
f6a2d6416a32b5b14c3da8531abaee02b7408762
2c8e7745c785b5e5bbee47c1e58c090a3d8865c202a05887bab17266d6a288a4
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 2303
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 208
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 2daf25cd-3c40-4767-bc3b-5f72924d91af, 2daf25cd-3c40-4767-bc3b-5f72924d91af
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998, 42137490-9be7-4216-bccc-7baed0659998
timing-allow-origin: *, *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000021BE
x-wacfrontend: BN3PEPF000020F1
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: A373FBF6DE654AEC83A0677C5F0EA4CB Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
200 OK 0 B URL OPTIONS HTTP/2 admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
x-ms-mac-appid: 61bc738c-9f44-472c-8d7a-3899d1cdd037
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 7488
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=a053c479-a903-487e-a0bf-985a2362fb1c; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=a053c479-a903-487e-a0bf-985a2362fb1c; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 554b17f9-e2e7-49a0-a246-7f2b910158be
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 755CCE299A1D464B8B871C884AB9E81C Ref B: SVG20EDGE0115 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash dcb2fdb80c3f6986708c45884773f7a4
dd2451821494b75374f0f298abcea8961a3a806f
6ebca96bd8ec6746cc6bdb523aeb6a1f32cd7841055e1aed68ea9fbd27990cf2
POST /we/OneNote.ashx?perfTag=EditorsTable_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 2221
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1079
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 54af2031-51ce-452b-a66a-6fec1148653a, 54af2031-51ce-452b-a66a-6fec1148653a
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998, 42137490-9be7-4216-bccc-7baed0659998
timing-allow-origin: *, *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002087
x-wacfrontend: BN3PEPF000020F1
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 624F20FC2CD746AE8EA30F2E4114721D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js
30 kB URL res-1.cdn.office.net/officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7acb124083418c285e63b5835b377cea
54498a00bb9c864a94832e4e084fe043e704c382
43c59e46ec07769408a75e941d5b82fd8f3ce5b3cd8175c457110b8fa4c53172
GET /officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29866
last-modified: Thu, 07 Mar 2024 01:38:30 GMT
x-ms-request-id: db02aba7-c01e-0003-064e-7b1ef3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28385794,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b12202&TotalRTCDNTime=2&CompressionType=br&FileSize=29866"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: bd29b541-7918-407f-8c0e-ce3d0329f365
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:02 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 22612
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 4d07ed4d-546e-4b97-bba0-2426fd6490e8
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/1033/osfruntime_strings.js
200 OK 2.2 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (11667), with no line terminators
Hash a1d892f1368c7f3b1dfb75057b936b66
91ec4980bfa5b301199b574e6240a618247679f9
2db70125e37f651d09a6d03d593a65e09668e6267cca1257251328517f7eaefc
GET /officeonline/we/s/161762541013_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2223
last-modified: Fri, 26 Apr 2024 01:42:24 GMT
x-ms-request-id: fbbafe60-101e-002f-039c-97f25c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28386026,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b122ea&TotalRTCDNTime=2&CompressionType=br&FileSize=2223"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/sdxprefetcher.htm
408 B URL res-1.cdn.office.net/officeonline/we/s/161762541013_App_Scripts/sdxprefetcher.htm
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with CRLF line terminators
Hash d4bb84acc0c5f6e586f65ea7eb54b10e
30eafa7073618745e9e35b4d40e9239413c34892
523f7470b591600b5ae24f2b17dc50a55f151dade725fe0da1dc89003eeafff2
GET /officeonline/we/s/161762541013_App_Scripts/sdxprefetcher.htm HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html
last-modified: Fri, 26 Apr 2024 01:41:47 GMT
x-ms-request-id: eda32581-e01e-0004-469c-977290000000
content-encoding: gzip
content-length: 408
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:02 GMT
alt-svc: h3=":443"; ma=93600
vary: Accept-Encoding
akamai-request-bc: [a=95.101.10.205,b=28386032,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575362.1b122f0&TotalRTCDNTime=1&CompressionType=gzip&FileSize=408"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639
1.2 kB URL word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 741a0b44-6f1a-47c3-8c61-d548c7de79f5, 741a0b44-6f1a-47c3-8c61-d548c7de79f5
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998, 42137490-9be7-4216-bccc-7baed0659998
timing-allow-origin: *, *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF00002210
x-wacfrontend: BN3PEPF000020F1
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: BFC2EDDD24E74D0F9ACFCB516E72D9F5 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
js.live.net/v5.0/wl.ms.js
16 kB URL js.live.net/v5.0/wl.ms.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JavaScript source, ASCII text, with very long lines (43338), with no line terminators
Hash c6ba4d44d3740688e6bdf01dace5b7eb
389a1825b6aad7cd758e2488ae1fcb3de2205dbb
d4c9bd86a5465d8414b7a10438d28110836126b387990d492fe545a5e701904a
GET /v5.0/wl.ms.js HTTP/1.1
Host: js.live.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 10 Jul 2020 18:30:22 GMT
Accept-Ranges: bytes
ETag: "0b3b92be856d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-MSNServer: 7fd5ff5fbf-sml2p
X-ODWebServer: eurwesteur001307-odwebp
Access-Control-Allow-Origin: *
Date: Wed, 01 May 2024 14:56:02 GMT
Content-Length: 16221
word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=0dcc7a43-f81a-0456-8790-d57168485f72&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639
403 Forbidden 1.2 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=0dcc7a43-f81a-0456-8790-d57168485f72&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=0dcc7a43-f81a-0456-8790-d57168485f72&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 7bd87e48-fb80-4a8b-95c7-10992ad21cf6, 7bd87e48-fb80-4a8b-95c7-10992ad21cf6
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998, 42137490-9be7-4216-bccc-7baed0659998
timing-allow-origin: *, *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF000021BE
x-wacfrontend: BN3PEPF000020F1
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_powerpointslice,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: C93EEF81F48E4D5597A811F613AA2E36 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:03Z
date: Wed, 01 May 2024 14:56:03 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash 2847c7c127619fbff882a1ae96cbc421
5c77b719c6bd36fe1cdb566cdde32a8cac5f95c0
349fce0bbae039037f0d352636898937020006b38ca4b8dbf5542b802404815d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714575359844
time-delta-to-apply-millis: 6369
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2572
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 3350
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714575362&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
11 kB URL login.live.com/login.srf?wa=wsignin1.0&rpsnv=151&ct=1714575362&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (24077)
Hash 05aed604f084eb8d7fb11da5c462c40a
9f748d8a8bf28534762f040a7a3b2614e7e979db
c66ba9b4f27958eb7b3a025e1b0083d3b3bbf146d491277aa0e1ff1ec423155f
GET /login.srf?wa=wsignin1.0&rpsnv=151&ct=1714575362&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Wed, 01 May 2024 14:55:03 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C503_BAY
x-ms-request-id: 5efee7a3-e2e5-4519-bc2d-465e150aa25b
PPServer: PPV: 30 H: PH1PEPF00011CCC V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=70adb880434345bbb0b74a2a7763fe7e; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1714575363&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Mon, 26-May-2025 14:56:03 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-44090250-5946-42de-82d1-8d70eea5886c; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DiJCMAYrWP1ldLXX3KXcrv3rliX1tYg6CaVCTTddRnOR4PPYOMkOngJwQa*vgCANaD4IyaMfJjeAJWmzsIvjp7zJ8cq0dsGN5GX*5ju3hTPGBuwpTfOLfBcL9J5taO04l1BNDQVck1KTbrz1b1FFQTbN5nVoq8!IAY48Y5TndiMw7wk2KCEfpXkLYQLAAGle7RoAaFN6XEV1Jgr8bQVaXlmOpJ1OVSGYRGar8WH382DduvNkspLB!0J7fHu0cNTCN!P4RTds666kss*QqtG6KMiBgzFkup8KPBnaz1VYUqKPS2YbmBNZ!4k*7yjON7HbfspwxlxjLPpifLlWoEJfgOHW!cMiMKRlrCERnhfcF!vM8JeMsTx*LXrfrSSPoLMwNcWzb1f7XRizU9Vfx73p5tv1YDGYyoTjUeBMYgrfir!q; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Wed, 01 May 2024 14:56:02 GMT
Content-Length: 10779
res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/we/s/161762541013_resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1475
content-type: text/css
last-modified: Fri, 26 Apr 2024 01:44:14 GMT
x-ms-request-id: c38e4eab-c01e-0013-509c-97db9b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28387585,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575363.1b12901&TotalRTCDNTime=1&CompressionType=br&FileSize=1475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
235 B URL word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash f77535334e854f148576b2a87ab01f12
018e1047606fdbf3f3f364c69ca6e29cef9e3111
de8926ce4d4ff778d822f45a1f93b12da18364a2e9e6163f557079c766a1437c
GET /we/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 8948ebac-dff0-4ec2-a7fd-e094bde9938a
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF000020F1
x-wacfrontend: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 9F69BF650230472FA84C479DEEE6D348 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:02Z
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/progress.gif
200 OK 695 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type GIF image data, version 89a, 24 x 24
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/we/s/161762541013_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 695
content-type: image/gif
last-modified: Fri, 26 Apr 2024 01:44:29 GMT
x-ms-request-id: 035a10fb-c01e-004e-4a9c-97d11f000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28387592,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575363.1b12908&TotalRTCDNTime=1&CompressionType=&FileSize=695"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
6.2 kB URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 3b761509f517bce5f38e533c5364171b
8c70ad0f4797bfd41d3f32109d7797796bfe3942
86272778cbf19d3d50406df0e430486d91aed6d854b5f58aa92fea49266d7a15
GET /campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17625.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-clientsessionid: b4b2f6fd-ecc8-40c5-d2d7-ed37bdccac97
x-correlationid: 53dcfaff-8965-440c-1511-44c85bceac45
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 01 May 2024 14:56:02 GMT
content-type: text/plain; charset=utf-8
server: Microsoft-HTTPAPI/2.0
access-control-allow-origin: *
x-activitytraceid: 7755836aa7fae3eb14e3674aec80a6eb
x-servicecorrelationid: 7755836a-a7fa-e3eb-14e3-674aec80a6eb
x-machine: OMEXNODE2000003__omexexternal-prod-aue-2-001_3
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 631b26d2-99bd-4e51-8362-98e407116e09
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/agavedefaulticon96x96.png
1.1 kB URL res-1.cdn.office.net/officeonline/we/s/161762541013_resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/we/s/161762541013_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1115
content-type: image/png
last-modified: Fri, 26 Apr 2024 01:45:13 GMT
x-ms-request-id: 5a92e5e5-101e-004d-389c-97307b000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28387604,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575363.1b12914&TotalRTCDNTime=1&CompressionType=&FileSize=1115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
200 OK 7.9 kB URL OPTIONS HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash fdc4cfb296abc6d9be9eb1632ade6bf9
2e362a7fc5f0dbf56ea2d5976e641bfabe5f9ec6
8f75c1c371a4876765b64376946cc2ad5cf28ef1f003c594f04c8df5b2783db4
POST /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: application/json
DMSActivityId: 48bc7a43-f810-880e-5067-f1551e84ce17
Content-Length: 1391
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Wed, 01 May 2024 14:56:03 GMT
content-length: 7947
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&sl=1&u=1
200 OK 236 B URL POST HTTP/2 word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&sl=1&u=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash ae08208d7a18f259251fc4016f753859
10e3a791b1160eeabf049d1059a77c00a5b936c2
a7799d9fc557428ce5cf5061f07cc9708752763f4d9ccba08f964e47a4ff7cc4
POST /we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3D1715003748574&sl=1&u=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Length: 0
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 236
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 89500363-675b-42af-8efa-76ab1c543b6f
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002087
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002087
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 3AE926367536480EAC9F0ED79D4B71B1 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:03Z
date: Wed, 01 May 2024 14:56:03 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 63596
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 3876d44a-571f-41fd-abbc-c8bf7a44a04b
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D76F
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 8AC75A36020A4B09A4EF8EFA3896A0C8 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:04Z
date: Wed, 01 May 2024 14:56:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 67559396-57f7-4024-b784-c7ccadf7ce93
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:05 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 35350
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b80da5c3-8e8c-4dbc-a306-72e0d96a9161
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:05 GMT
content-length: 0
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382
0 B URL store.office.com/gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 01 May 2024 14:56:05 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-8iO65rrkJwS4ZCDvrKcO7P9ULTP3btCsVN2VhPxyDpY=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: 60c3e2026d87103799bf0b7b5d570791
x-correlationid: 60c3e202-6d87-1037-99bf-0b7b5d570791
x-machine: OMEXNODES000005__omexexternal-prod-weu-000_5
x-buildversion: 24.4.10418.10727
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: 1a3f185f-22ef-4a8c-8924-4663c39cdbc8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes
403 Forbidden 34 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash dff7130de9a8b3918a039bdae456c906
ce368374b5613e5d82e5d071b50ebe815cc85a33
0f56da3bf34b22677b70159a64377d49032463cbeea2420b508ea63bb4714623
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c1aa29c1-c1df-443d-83aa-e878f5d02c3f
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002210
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF00002210
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: A1C60C9BECFE4BD7B37C74AE98AD170E Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:04Z
date: Wed, 01 May 2024 14:56:03 GMT
X-Firefox-Spdy: h2
res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
6.8 kB URL res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 6784, version 3.30147
Hash 14ec2d31f37bb0f43fd441d11e771d50
48f83a9581a5e37ad1ccd0d4848efc7fa64c17cf
43c551ea819a83b1100f566ecf6bd70db5a019f165d221200af2df11c4448627
GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6784
last-modified: Mon, 29 Jan 2024 20:39:52 GMT
x-ms-request-id: 72ef713f-601e-0068-7bb7-539907000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28392708,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575366.1b13d04&TotalRTCDNTime=1&CompressionType=&FileSize=6784"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff
14 kB URL res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 13592, version 3.-32768
Hash 21cc8d639f8eb5b6ec27871007d5f7f4
f6425d1f545e5804c9b4f775a55ba97957067916
feed3199f66754edb85ef89823521f403da1a83d46d33369510906b4359c7f6e
GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-15-3807251b.woff HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13592
last-modified: Mon, 29 Jan 2024 20:39:47 GMT
x-ms-request-id: 4a630aeb-b01e-0009-5e1e-54ba44000000
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28393012,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575366.1b13e34&TotalRTCDNTime=1&CompressionType=&FileSize=13592"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 55e4618b-eb3a-4023-b6bb-90a38c25d545
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:06 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 56074
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 774bc426-4e45-410c-bbce-8c288fc13c6a
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:06 GMT
content-length: 0
X-Firefox-Spdy: h2
fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
200 OK 10 kB URL GET HTTP/2 fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 7696f8b035292f5d72f138d21671396b
0ae52f8d9004f77c6399f3db2a3053c8221c49d5
48afc1d5b0515029bc04d4c0365ecf286367f051f5f93356ade5d639ea866597
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000002.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xDE14F5441BD16FFD147B920AF1CB96A4E54190F739E2F90574B425A1076135CB"
last-modified: Tue, 05 Mar 2024 01:34:06 GMT
server: ECAcc (lpl/EF3E)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 9973
content-type: text/xml
cache-control: public, max-age=206429
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
200 OK 892 B URL GET HTTP/2 fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash c588e014a7a269c048b7f28d72220900
acc610bb4338b9207bfe8293df35c07bcab82648
03c6dd0c23b808ac239aaea3f3e8e7943128633d6048cede869cb2fe67a842e5
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000012.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x051054F2987E90D00D4AB37078BA6E1906843E6BF3516912E489171471812B0E"
last-modified: Tue, 26 Dec 2023 19:12:24 GMT
server: ECAcc (lpl/EF7C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 892
content-type: text/xml
cache-control: public, max-age=209744
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
200 OK 1.5 kB URL GET HTTP/2 fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e90570b9ba60d5c852fbe5ef17ac3538
5c1204b41de749cbd2da56abc2afd52d1e036ded
41c2b87ba4a89e79b898c09a2f7d520e9c98aab5c11fe937e640a46e72b26552
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000006.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 May 2023 22:57:41 GMT
etag: "0xE64D3D4DD5FB52AEF649F58F41B03E9A18AB236F359146E390AEAC833295DAEC"
accept-ranges: bytes
apiversion: Distribute 1.1
x-msedge-ref: Ref A: 74C7C982AFF34B2EA19D19C96AF94111 Ref B: LTSEDGE1907 Ref C: 2023-05-31T17:40:58Z
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=141782
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 1460
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
722 B URL fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash bcb0c4305749b10c7e9f428f8199caf5
b0afc5be5abe6f91286c5f15784ec25fb318badf
996a3022bdb1c69a264b5e164e4596169d81a91dc6114f7b971fbcd2a218e69c
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA75EDBF8D6FD6E64EC15A55BED859C6D856ED5E78B4556F6A89F2A5D9E7FAAD4"
last-modified: Wed, 24 Apr 2024 07:45:09 GMT
server: ECAcc (lpl/EF58)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 722
content-type: text/xml
cache-control: public, max-age=130381
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml
934 B URL fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 419e6c242dba4e71cefd42c01f0e91a6
82ef7dc0bf5c262ca2bea08573924a52d68624e3
43b556c798959900cb9ba58fd42b7cbc8551d833e8326f5d89dffe2885bcfbab
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2404.23001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000051.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xE5D03545D9719BFEEA6F808B21DE367DD61B95F0550EEBBBF36110625781D954"
last-modified: Tue, 30 Apr 2024 10:01:49 GMT
server: ECAcc (lpl/EF53)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 934
content-type: text/xml
cache-control: public, max-age=155557
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
726 B URL fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5afe7e5f67d7a7f2f730668a1560c2c0
00c7f4c49f72cacd2364039f052c31557af1deec
a878d169b063437be613a6f42c49283f299bfea063b3a124480545dbb3b0ba5f
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000029.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Jun 2019 10:02:20 GMT
etag: "0xB37202CB6635558936052D0FB47DA652F0126AB5C799C5CEDA7CEFD689CFAB49"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0wXinYgAAAAA2XVKsfc2TT7Vf80S3JjtITE9OMjFFREdFMDIxNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=57453
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 726
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
647 B URL fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash a14c3949c1836fa3e4d41fae6e193533
2c5ac12c29ccdb630bc31473aa37625853ce177f
6768de051f32e94233d5fb12580b92586c5d516d1867b790bb77f4a3c53c3aad
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000059.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
apiversion: Distribute 1.1
etag: "0x04055EFA84D467751869A7732800EA33B320AEC7FF50A0270FD68CA76C1E376B"
last-modified: Mon, 06 Nov 2023 23:32:28 GMT
server: Kestrel
content-encoding: gzip
content-length: 647
content-type: text/xml
cache-control: public, max-age=50472
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
200 OK 774 B URL GET HTTP/2 fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 506f01f02fe03f2844bf75380f6400b0
ae21f96c93c367afb5a11a0a9ea0f823bf318dbe
86b2af7758ef1bf4c43eb037b43064e130d9528e2890142ab1bda58e8cdcabd9
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000074.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Jan 2022 19:01:29 GMT
etag: "0x87722E389E5EEA4293E0C3FE0FD8D026B0B4D441923822E996090B9F64097695"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0QoKoYgAAAAD/v2EF/ClzT7JeJDKP8PkcTE9OMjFFREdFMTUxOABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=206455
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 774
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
200 OK 503 B URL GET HTTP/2 fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5e6edc73470ff3e746bc8bdac6fb38b2
7dfa441d001fe0b50a5f6ed6102479662d2497df
71344c4aacbc26401dd2cfdcdb7c16625b423b4e710a0030a65d90b7e16f602d
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000110.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x4B895E43C1663E489850FC20D3E97389C5A0EEE9DBD7D5214B29C0484C6D0125"
last-modified: Mon, 04 Mar 2024 06:27:54 GMT
server: ECAcc (lpl/EF4C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 503
content-type: text/xml
cache-control: public, max-age=138338
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
510 B URL fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 605c6bd48b2ab0262c0113445494ff4c
00cc6621252eb4930486f4837638a0524e5c77e9
405497ac72ada72a30277e2493a9b00b999df6ce1b425167b8c405af45ef0338
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000111.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA469F9CB0BD572336E79DA17C4D92777808887EC57EBF3B424F2A62F178652C6"
last-modified: Mon, 04 Mar 2024 06:23:27 GMT
server: ECAcc (lpl/EF53)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=138037
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 510
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
607 B URL fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash b105f6e9c6aa1cc3743b0afed2f68208
cb7ce1946647cf98eacf382b4a40efcbf6552cdb
c1d5cec2f2e208b33edf95459780a50b055a4302b45789dcbae466bc10dc8655
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000085.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Jun 2021 13:14:45 GMT
etag: "0x9A6E8947EAA5FEB8D55945344E0F9E15183088588574AF4A348E58DEA11018A0"
accept-ranges: bytes
apiversion: Distribute 1.1
x-ccc: GB
x-azure-ref-originshield: Ref A: 45A9F89529244642ACACEF9D406D593A Ref B: AMS231020616037 Ref C: 2023-08-03T21:14:58Z
x-msedge-ref: Ref A: B35E237ABF6B4998953F4C1F6328F90A Ref B: LTSEDGE0816 Ref C: 2023-08-03T21:14:58Z
x-azure-ref: 0wYSoYgAAAABdyw65xcJ8QLPqAkZM0TlRTE9OMjFFREdFMDIxNABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-encoding: gzip
content-length: 607
content-type: text/xml
cache-control: public, max-age=209571
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 7, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
9.9 kB URL fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 4fee61f6dab5542b0bca78a0d52955be
5fec5fcd246d81e15b4c222785e1837fd66e5e27
0d57369177aada824d3e5d5488f7cf06da4e590c67adfc06260940340162a676
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000116.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x46C088B08547C754497DA95DE7E2DEBA67E8B34C2B283CDD7BCFF207EF9BB6B9"
last-modified: Thu, 29 Feb 2024 17:57:56 GMT
server: ECAcc (lpl/EF1F)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=144435
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 9863
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26003/en-us_web/manifest_web.xml
1.0 kB URL fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26003/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text
Hash 6361125f88da5ad79615b988e02b0c73
fcdd14882b759ed4ee34ac1ac8ab338a853e62a4
74bea8988e533520807cacdecc1aff38c705d80641602a582c98749e70476325
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xC0211EEB995D5ED1754E5046A585EEF2389B40C1B138E34B176EC4837521D1D3"
last-modified: Mon, 29 Apr 2024 10:22:15 GMT
server: ECAcc (lpl/EF58)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 1001
content-type: text/xml
cache-control: public, max-age=71140
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml
911 B URL fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 4d4b25c5bf217201f2709ba7cad52fe3
ec61d7397c47b3e119fb6bb7fd6a93e3b40ad458
d38d1d7b9f270402de905852930f4aac616f132f383106b0fb5bbcfe543287df
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.26012/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000145.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x6881D4B1660EA5A1838E5A7E963DB0BA66B4E87F588F1C898F85FF80103D2194"
last-modified: Wed, 01 May 2024 09:09:58 GMT
server: ECAcc (lpl/EF6B)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 911
content-type: text/xml
cache-control: public, max-age=239102
date: Wed, 01 May 2024 14:56:07 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
862 B URL wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 8cd6310c1f018cb9f32550ddae7b0770
7e0c7c73bb47bfcda53ca84f1def2b14e139123a
15e26c7d0c4f4deb349cf6aaba4908fcb74e59206d1fa595860b581e912201d3
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml HTTP/1.1
Host: wa104381125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 20:46:25 GMT
etag: "0x5B1FFB271A8FCC31E82D5365960926E0543BCFBCD84D2CB94E40003EB71E6894"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0oHSpYgAAAABOtWO+JFd/QLAOIaRKHaurTE9OMjFFREdFMDIxMABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=209591
date: Wed, 01 May 2024 14:56:07 GMT
content-length: 862
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
31 kB URL res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 2f1d74149f052d3354358e9856375219
8019f7a2ea824930f91c3ec375d926b650fb1cff
66c70312de6ca4e1d7ef1e858307764c241a80e7411cee686ea2fc2d74152749
GET /officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31172
last-modified: Mon, 28 Aug 2023 16:59:51 GMT
x-ms-request-id: 9e24c479-b01e-0009-1214-7cba44000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28400014,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575369.1b1598e&TotalRTCDNTime=1&CompressionType=br&FileSize=31172"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 4719cec5-bf6d-4059-9ecb-78e3ee8be00a
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:09 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: eb274e22-d5ff-40f7-ae46-0d1620589f34
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:09 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53011
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: e3202d7d-213e-4b5d-82d6-e793ec55cd0c
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:09 GMT
content-length: 0
X-Firefox-Spdy: h2
pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358056
54 B URL pus8-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358056
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 293d4cc6dd528e7615522a837480486e
f64c7541af99681c1a7131099f069d0e54c7a2e2
cc28b3115c87326f6bf2208d0a8278052c91245465daa8a1132aa9a9790c91c7
GET /rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fmy%252Emicrosoftpersonalcontent%252Ecom%252Fpersonal%252Fe990dac68d1adfc2%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F914e2bb70dd440108f5d47b6b2f5e844%26access_token%3deyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%252EmgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li%252DWDwR%252DejDGuKy0DcRLdCpcgaxRBy7%255FLeEGJ74YU6KDF3LKsljolLt%252DSPDcczGNDorQa0%255Ff6eUe7%255F79DPAKe%255FmYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h%252DXzS8WjNHf05ov%252DlQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ%255FONFcw4VTMHsfJZdGcOBwQ%252DeZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w%26access_token_ttl%3d1715003748574&ClientId=%7b42137490-9be7-4216-bccc-7baed0659998%7d&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&mid=BN3PEPF00009E6E&ts=17145706620000000&eTag=%2229133d64-0000-0500-0000-663245a60000%22&waccluster=PUS8&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xVDBjYWZxQjUyQjFVNFA4WW1VZ1dWTkdLQ0lrWFFiUFhXT1EwejlsJTJmJTJicyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0NTc1MzQ5MjI5ODkxOCZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17625.41013&corrid=1e0260e4-c20a-40f8-8e01-799f716f038d&connectionToken=H3p6G3PReHxuZVEncJAt-Q&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714575358056 HTTP/1.1
Host: pus8-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PUS8
x-frontend: RtcNetCoreLB1
x-machinename: BN3PEPF00009E6E
x-userhostaddress: 91.90.42.0
x-correlationid: 1e0260e4-c20a-40f8-8e01-799f716f038d
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
x-officefe: BN3PEPF00009E6E
x-officeversion: 16.0.17624.41001
x-officecluster: PUS8
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: BN3PEPF00009E6E
rtcsessionid: 2d7f96f1-4209-44f9-888a-dbf0cbf0f74e
x-officertcproxy: BN3PEPF00009E61
date: Wed, 01 May 2024 14:56:02 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:09 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
25 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 3a068947034f25251d9b2c58e6431ef0
4e480a87616fc6311bfbb6c30a46e8b1fec42d55
c9dadcc22c25ffeb7e9a2c753c511f1fe939d217edc1c5e68265130f975abb2b
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,250a372c4a854d8fb120ef0366f9410c-dd39bcd8-3b38-4c6c-9f8d-3821e5c28b47-7487,d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360,9783945ebc2b468fbb8a2890cdab903b-787355a5-74c8-4a89-b06a-9c82635d75fa-7162,71cc1046851042108843d90e5d3ef6c1-61e5de5c-238c-4de5-95de-3b40d20ea6e5-6899
upload-time: 1714575369771
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 292912
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 285
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:09 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:09 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
11 kB URL res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (49368)
Hash 668059a0ad862537a322d4651f639346
4db9ac8003b9172029d953fe41e789835e1f7bdd
b91087f2852920bbff9c4e029c154a5e90f5bde0f9f7044ace7d11d4b0f2344c
GET /officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10673
last-modified: Tue, 11 Apr 2023 08:47:02 GMT
x-ms-request-id: 42da5b2d-b01e-0019-5431-7a7f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28402829,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575370.1b1648d&TotalRTCDNTime=2&CompressionType=br&FileSize=10673"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:10 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
25 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 4f603d975717346f6d00844b01c5491f
546d05a76fce5453825e7fd9f5f30a63e4fd2013
747f6bdb3844c84c802e07265ac141b04c8c69f89ae9f2240e70eb6dc0a425bb
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714575370699
time-delta-to-apply-millis: 285
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 61300
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 76
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hF26CA3DA92413717_App_Scripts/WordEditorDS.uploadFromPC.js
235 B URL res-1.cdn.office.net/officeonline/we/s/hF26CA3DA92413717_App_Scripts/WordEditorDS.uploadFromPC.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text
Hash bfa9429dcfd68abb0178d6a93cb24d83
a7d948f33913cdf99103caf75f87dad0eaf8c80b
f26ca3da9241371777de7cd58372339fcd33b30392ff5ee7514791f7555b7826
GET /officeonline/we/s/hF26CA3DA92413717_App_Scripts/WordEditorDS.uploadFromPC.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 235
last-modified: Fri, 26 Apr 2024 01:43:02 GMT
x-ms-request-id: ebc2ffcb-a01e-0048-7ba0-97e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28403055,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575370.1b1656f&TotalRTCDNTime=2&CompressionType=br&FileSize=235"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
14 kB URL res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (54497)
Hash 1e492e40049c2ff65b02b398b094f839
741ae0d5de13a5f31b1c2542795677e8fc8c708f
51814c1e404f7cac92c602596b8bf0c09dc468c0f5e2d69928939077635e0b1e
GET /midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13551
last-modified: Thu, 27 Oct 2022 16:58:37 GMT
x-ms-request-id: 3ca4946e-b01e-0036-2675-7e72e7000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28403064,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575370.1b16578&TotalRTCDNTime=2&CompressionType=br&FileSize=13551"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
4.7 kB URL res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14582)
Hash 8db72649caf05d1afb098a140f959321
8b744af169a965e23a4c1530e227f5d7b3647086
9ef8104de1a651ace27cd748d0a80ce668e3353f98a57cffd99a86ad9c7fae4c
GET /midgard/versionless/loggingdependencies_93278b946fd4334766a5.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4680
last-modified: Mon, 21 Nov 2022 14:21:52 GMT
x-ms-request-id: eeeca2a6-d01e-0042-7094-644617000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28403065,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575370.1b16579&TotalRTCDNTime=2&CompressionType=br&FileSize=4680"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714575370988&time-delta-to-apply-millis=use-collector-delta
0 B URL browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714575370988&time-delta-to-apply-millis=use-collector-delta
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714575370988&time-delta-to-apply-millis=use-collector-delta HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1164
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 176
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept, Content-Type, Content-Encoding, Client-Id
access-control-expose-headers: kill-tokens, kill-duration-seconds, time-delta-millis
date: Wed, 01 May 2024 14:56:10 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:11 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
25 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 794ff25b04d92b5b795a95e8a67df8de
bd881429d1dfe3dfe054d3490525079d4699e7e6
f1d96bf2c42f11222c6f048289d183554a4865914aafefe92cf73bb46bb85a59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714575371705
time-delta-to-apply-millis: 285
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 56384
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 101
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:11 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:12 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash cfb70136cf464a8086f7eea9d46dce49
ccf5258bff5b3a1a62d1628646a4236445428a61
5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714575372703
time-delta-to-apply-millis: 285
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 18794
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 56
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:12 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 44d95139-f4f0-4ce9-9000-3d3168ff4805
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:13 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:13 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714575373745
time-delta-to-apply-millis: 285
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3305
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 46
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:13 GMT
X-Firefox-Spdy: h2
services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US
82 B URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US
IP
Hash 4f822d39c269d2c47e3174b6c6bad3b7
d56bd07959c766e9c18faa9cf1070548f9236b65
cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 82
server: openresty
date: Wed, 01 May 2024 13:57:21 GMT
allow: GET, HEAD, OPTIONS
x-amo-request-id: 2a10e84cd62d4e6fa19b105e96ac6774
content-security-policy: frame-src https://www.recaptcha.net/recaptcha/; default-src 'none'; font-src 'self' https://addons.mozilla.org/static-server/; style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; object-src 'none'; form-action 'self'; media-src https://videos.cdn.mozilla.net; script-src https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; child-src https://www.recaptcha.net/recaptcha/; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/; connect-src 'self' https://*.google-analytics.com; report-uri /__cspreport__
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
public-key-pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
via: 1.1 google, 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
vary: origin,X-Country-Code,Accept-Language
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F-wDaK_pwcOtc-wSPWIzYpjDyEvVr1zLpezy4EyISm3NwDHF1nL62A==
age: 3532
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (1141)
Hash bcc8fcba76c1a94f5ebe1d9b803dec6f
03b30d8e3852b7872351c9e427e54100153d082e
53ce432c2b641e87f8bf0c9eb069fda8b8e858cf5b3e4cdb701d26dc4cd47df1
GET /officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8641
content-type: text/css
last-modified: Tue, 02 Apr 2024 06:34:15 GMT
x-ms-request-id: 278ab5b9-201e-000b-16f7-8404fc000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28409068,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575373.1b17cec&TotalRTCDNTime=2&CompressionType=br&FileSize=8641"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hC56B5538A610A6CF_resources/en-US/clientManifest.exp.js
33 kB URL res-1.cdn.office.net/officeonline/we/s/hC56B5538A610A6CF_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash e518b18e3fb9e1863f54cdb8b8db2ba9
6c380b60891ac929e60b9ea391c4c773b4a16f32
c56b5538a610a6cfdee8b44c2762f1f8c27b42a8b0e59320dd4660adbdd8ffce
GET /officeonline/we/s/hC56B5538A610A6CF_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32868
last-modified: Mon, 08 Apr 2024 12:34:29 GMT
x-ms-request-id: df900a06-a01e-0067-08ea-89ef6b000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28409073,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575373.1b17cf1&TotalRTCDNTime=2&CompressionType=br&FileSize=32868"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 56524
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 38d09821-580c-4a02-9ba1-b98187ad1449
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:13 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h21B547E48298437D_App_Scripts/WordEditorDS.js
1.0 MB URL res-1.cdn.office.net/officeonline/we/s/h21B547E48298437D_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (715)
Size 1.0 MB (1018267 bytes)
Hash ec868b3947749e20ba2c650a390da8f9
c6c24dd686f454f217ffaf6fbf2cfd507c4e1e20
21b547e48298437d1b12bce63c440ad467e7e39a07f1a8eed20702d97a5fdeb2
GET /officeonline/we/s/h21B547E48298437D_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1018267
last-modified: Mon, 08 Apr 2024 12:26:44 GMT
x-ms-request-id: fe68d389-801e-004f-76ce-898ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:13 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28409064,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575373.1b17ce8&TotalRTCDNTime=2&CompressionType=br&FileSize=1018267"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
42 B URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type XML 1.0 document, ASCII text
Hash f8f24fa0c857d8f2ee493e131b85ab62
cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6
e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
via: 1.1 google
date: Wed, 01 May 2024 14:54:25 GMT
content-type: text/xml; charset=utf-8
age: 109
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
0 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Wed, 01 May 2024 14:56:14 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash cfb70136cf464a8086f7eea9d46dce49
ccf5258bff5b3a1a62d1628646a4236445428a61
5d7bf60eb04f9c808ffffdd257860252746851e3f2ead7a30e55ad4f2ab55acd
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714575374757
time-delta-to-apply-millis: 285
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 80338
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 174
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:14 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes
403 Forbidden 1.2 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3MTQ1NzUzNDgiLCJleHAiOiIxNzE1MDAzNzQ4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYXRlbmFudGFub24jOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhdGVuYW50YW5vbiM5MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQiLCJzaGFyaW5naWQiOiIxZTg5NWEzYzE0MjkyYzI5OWNmZjE0NDJmNDViMzE4ZSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiOTE0ZTJiYjcwZGQ0NDAxMDhmNWQ0N2I2YjJmNWU4NDQ7dlhqbUZlRWpsc2p4TTFaeTMxT2ZFVmlKQUUwPTtEZWZhdWx0OzMwNTMwN2ZkN2NlNzRiYmI4MTQwYzQyZDcxZTU3NzliOztUcnVlOzs7MzkwODs0NjZkMjRhMS0zMDgxLTgwMDAtOTEwMS0yMmU4MWNkMmQ4ZDciLCJmaWQiOiIxOTI2MDUifQ.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 82ff8781-b44b-4d2e-b0e8-3359693b3e44
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000020F1
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF000020F1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: BA28F62A676042FD8297201DD382C2AB Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:14Z
date: Wed, 01 May 2024 14:56:15 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-bULS-SuppressionETag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w
X-AccessTokenTtl: 1715003748574
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 20500
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 7698599d-d056-4485-8595-ec9c195ffbff
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:15 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h6E75D60F6AF8C993_App_Scripts/WordEditorDS.core.js
401 kB URL res-1.cdn.office.net/officeonline/we/s/h6E75D60F6AF8C993_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (3005)
Size 401 kB (400756 bytes)
Hash 89f3b22a399ee387f7380dd8d886043a
df00a57fecec588bf2063141ad76614afc1ee2ba
6e75d60f6af8c9931755b892f0e1b0d5295b145d9a54ddee10bb62399476448b
GET /officeonline/we/s/h6E75D60F6AF8C993_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 400756
last-modified: Mon, 08 Apr 2024 12:26:29 GMT
x-ms-request-id: 2fa3994b-101e-0010-1bce-893aff000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:15 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28412339,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575375.1b189b3&TotalRTCDNTime=2&CompressionType=br&FileSize=400756"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
75 kB URL word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 6e901d36cad386727b5e6838520d9683
5542eee1de9b980a961bf374fc4375a6456b1382
da92896df82606908ad7954fa0bb78f48189b9f1b95791b9f19aaba478d914d5
GET /we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2Fe990dac68d1adfc2%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-OfficeVersion: 16.0.17625.41013
X-WacCluster: PUS3
X-WacFrontEnd: BN3PEPF000020F1
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6+7OJjtD82PM=;O9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd/En3srSE=,638501721489486282
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0d5baa29-ef54-4d9a-a148-7e7e8c38408c
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF000021BE
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-officefd: BN3PEPF000021BE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 8CE93E3F2AE74F24B1EDE8E38DDFEE5C Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:14Z
date: Wed, 01 May 2024 14:56:13 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
24 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130
upload-time: 1714575369869
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 812
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 7013
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:16 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
4.5 kB URL res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 01ae70c8-701e-0029-35f6-74c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28415756,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575377.1b1970c&TotalRTCDNTime=2&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
common.online.office.com/suite/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
0 B URL common.online.office.com/suite/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 613
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=92f4aabffd6ebc91c98aa64ff8b352247003f2f673efad7e0d3f1f2442a3d63e;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: d7327d7e-3f30-43bf-94b7-fc8c03ce34a6
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D751
x-officeversion: 16.0.17617.41003
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DD20
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F7076748132146239EB0D57B2A0D47EC Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:18Z
date: Wed, 01 May 2024 14:56:18 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1526
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=449e7457ff1788af3aad6268a22a273342dc947d7478187f1d55a73bba16bc74
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 2d71b87a-54c6-42c5-b29d-cb7a1b59faed
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D754
x-officeversion: 16.0.17617.41003
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4F0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2D2CEF25032D4A938612545E6CC911F8 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:18Z
date: Wed, 01 May 2024 14:56:18 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=42137490-9be7-4216-bccc-7baed0659998&build=
2.3 kB URL word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=42137490-9be7-4216-bccc-7baed0659998&build=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 31f518357c71e4e959dbc1fcdafa1c1c
07ac6caacc9f2146b9ffe9f9dbab849a857001da
b021d9fbd5f5bdb4a4d30f26066566d2a445c445a2e5826ce777f9eee6762a2a
GET /we/AppSettingsHandler.ashx?app=Word&usid=42137490-9be7-4216-bccc-7baed0659998&build= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2256
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ef9b7253-4cde-43b6-9e23-d84a508ee7ce
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7EE
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-officefd: AM4PEPF0002D7EE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 86AA9B2B44FA4D7C8D2A85613D4F948D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:18Z
date: Wed, 01 May 2024 14:56:18 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
0 B URL word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 388
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: c90ee8fc-111e-41c8-a139-f99d7c92772c
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00010FCD
x-officeversion: 16.0.17625.41013
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 8A482BFECC264718ABDD9B5860F93F18 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:18Z
date: Wed, 01 May 2024 14:56:18 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Wed, 01 May 2024 14:56:18 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 036bd0e2-801e-004f-5c65-7a8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:19 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28419905,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575379.1b1a741&TotalRTCDNTime=2&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0
24 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintA6:4E:68:D6:EC:08:4B:66:31:05:26:0D:E2:5E:1F:2A:06:29:59:23
ValiditySun, 31 Mar 2024 04:58:47 GMT - Wed, 26 Mar 2025 04:58:47 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D4f62bd9909a74cafb958fa1891bca420%26HASH%3D4f62%26LV%3D202405%26V%3D4%26LU%3D1714575357100&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714575379240
time-delta-to-apply-millis: 7560
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3066
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 876
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:19 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hCE75E65D3FEA3C8A_App_Scripts/wacBoot.min.js
44 kB URL res-1.cdn.office.net/officeonline/we/s/hCE75E65D3FEA3C8A_App_Scripts/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash ea0794eae586ff4c5c63a7de71927398
9c8660f81afb098456ce2e4e08e0bd443d03f625
ce75e65d3fea3c8a4b4831d387f6192dfc550d8e6cdb7b620f100c9b50d5b4d6
GET /officeonline/we/s/hCE75E65D3FEA3C8A_App_Scripts/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43612
last-modified: Sat, 06 Apr 2024 06:24:17 GMT
x-ms-request-id: 1c874e12-a01e-003a-4058-88e5ef000000
content-encoding: br
cache-control: max-age=630720000
date: Wed, 01 May 2024 14:56:21 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.205,b=28424751,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cd0a655f.1714575381.1b1ba2f&TotalRTCDNTime=2&CompressionType=br&FileSize=43612"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
200 OK 0 B URL POST HTTP/2 common.online.office.com/suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=20240428.1 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 580
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=449e7457ff1788af3aad6268a22a273342dc947d7478187f1d55a73bba16bc74
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4274243b-9b7c-497c-82f3-058f2689c650
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D754
x-officeversion: 16.0.17617.41003
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4D9
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 70BA24742B9E42BFB34299F8E3D3029D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:23Z
date: Wed, 01 May 2024 14:56:22 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 5a9bcf23-b6f7-4be4-b362-30c298264391
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:23 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13578
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=4f62bd9909a74cafb958fa1891bca420&HASH=4f62&LV=202405&V=4&LU=1714575357100; MS0=2c6f1e10602849e2b29484e974662d29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: -5
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Wed, 01 May 2024 14:56:22 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PNL1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 6102
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 06cf7952-b429-472d-b616-5050f3e42109
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7A0
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6F5C2061F89047F2B5E74FF78EE2ED5D Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:23Z
date: Wed, 01 May 2024 14:56:22 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
200 OK 0 B URL OPTIONS HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PNL1&usid=42137490-9be7-4216-bccc-7baed0659998 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: 42137490-9be7-4216-bccc-7baed0659998
X-BrowserUlsBeacon: [{"Index":18,"MsSinceStart":33960,"Value":"SessionExited","Type":"SessionBoundary"},{"Index":19,"MsSinceStart":33960,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: dedbdeaa-a067-4389-923d-1fb85b4b7190
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:23 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&haep=1
116 B URL word-edit.officeapps.live.com/we/OneNote.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash bf90362096d3dbc85ba2824253c2f68d
2420dcde407737cc4c8856b115afbd5e46088483
6df862c666969d5c2da7dd4bf813e3c7c24a02d583c05efbff575f96debf7291
POST /we/OneNote.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.mgIwwAXgHwGHOpyrqEAQ0sQcIpm0D1JHWNzkbfH4F9ed8JjBpN3li-WDwR-ejDGuKy0DcRLdCpcgaxRBy7_LeEGJ74YU6KDF3LKsljolLt-SPDcczGNDorQa0_f6eUe7_79DPAKe_mYqFcSLvY81QHaPeBnMpYahS4BYUNbyoLvsU9HYqHZSEuKsKewvSvcqmxrHZmUnbg2lkBO8h-XzS8WjNHf05ov-lQV6QbzNAfBes2rZ5MA4lNKI4ZFLLTA86yEaW1Dot9TeEAP0VYJtwpOeWrTvHBZ_ONFcw4VTMHsfJZdGcOBwQ-eZRY6hlfWRQVE2I5iiDzHNPZEEE0W80w&access_token_ttl=1715003750639&haep=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2099
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 116
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1d087881-a981-4d4c-9cc3-c35855592a25
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002087
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: BN3PEPF00002087
x-wacfrontend: BN3PEPF00002087
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0070CB0FF527406C8B385930E18B2866 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:23Z
date: Wed, 01 May 2024 14:56:22 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PUS3&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1
0 B URL euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PUS3&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17625.41013&waccluster=PUS3&usid=42137490-9be7-4216-bccc-7baed0659998&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 57569
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 0feae7eb-b988-4bae-b912-c80848fd5e13
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
x-officefe: DB3PEPF000063E1
x-officeversion: 16.0.17627.41007
x-officecluster: PGTEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PUS3&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB3PEPF000063E1
set-cookie:
date: Wed, 01 May 2024 14:56:23 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1
2 B URL word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /we/WsaUpload.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&build=16.0.17625.41013&waccluster=PUS3&WacUserType=WOPI&ckey=lAKZkVzjXof5OzypFiHW6WIrxcQDSOI6%2B7OJjtD82PM%3D%3BO9v4QqSuBgRA6rgfjYjNmxLwhzoj5K9kObd%2FEn3srSE%3D%2C638501721489486282&haep=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 13289
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714575360098_0.6138935541473647; PUS3-ARRAffinity=fa8ba41419d4151d92b908acf90564b19e6ba4fb748f4115bc2080a9a958498f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2
content-type: text/html; charset=utf-8
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: cc8b3a58-42e2-4841-9034-5c23b223d7c4
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: BN3PEPF00002210
x-officeversion: 16.0.17625.41013
x-officecluster: PUS3
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-officefd: BN3PEPF00002210
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: 892D2686AC3342A399F028E2D328F705 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:56:23Z
date: Wed, 01 May 2024 14:56:22 GMT
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382
404 Not Found 0 B URL GET HTTP/2 store.office.com/gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectstore.office.com
FingerprintF8:80:E4:7F:AF:AF:76:D6:E1:1C:60:13:3B:11:BC:8D:1C:08:B2:FC
ValiditySun, 31 Mar 2024 22:15:37 GMT - Wed, 26 Mar 2025 22:15:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?41eb85ed_b4279483_1714575365382 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 01 May 2024 14:56:05 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-8iO65rrkJwS4ZCDvrKcO7P9ULTP3btCsVN2VhPxyDpY=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: 60c3e2026d87103799bf0b7b5d570791
x-correlationid: 60c3e202-6d87-1037-99bf-0b7b5d570791
x-machine: OMEXNODES000005__omexexternal-prod-weu-000_5
x-buildversion: 24.4.10418.10727
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: 1a3f185f-22ef-4a8c-8924-4663c39cdbc8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
augloop.office.com/
0 B IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2Fe990dac68d1adfc2%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F914e2bb70dd440108f5d47b6b2f5e844&wdenableroaming=1&mscc=0&wdodb=1&hid=fsb6QVa1GUupA7yDQxEQKQ.0.0&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05%22%7D&wdo=2&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=42137490-9be7-4216-bccc-7baed0659998&usid=42137490-9be7-4216-bccc-7baed0659998&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&ctp=LeastProtected&rct=Normal&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectaugloop.office.com
Fingerprint5F:49:D3:26:BB:2D:34:56:E6:16:10:E6:A0:D5:3A:BB:7F:7A:AE:91
ValidityThu, 15 Feb 2024 20:14:57 GMT - Sun, 09 Feb 2025 20:14:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6A+TBImRVlgJW+yq7cWrnQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&resid=E990DAC68D1ADFC2!s914e2bb70dd440108f5d47b6b2f5e844&cid=e990dac68d1adfc2&ithint=file%2cdocx&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3cvYy9lOTkwZGFjNjhkMWFkZmMyL0ViY3JUcEhVRFJCQWoxMUh0ckwxNkVRQkNRbEVTYmZBQzdrblYzMFlLUGJFdGc_ZT00OmZtR29NMSZhdD05&migratedtospo=true&wdo=2
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=42137490-9be7-4216-bccc-7baed0659998&officeserverversion= HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2827
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:K2Q9yO5p3Ig=:yU7uZ0f9/Rgujcw8M6JNFD30n5T74GrUkdjTrAUIkrY=:F; xid=72c4f5da-6234-4c56-940a-4089d5280fb1&&ODSP-ODWEB-ODCF&161; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 01acc975-afea-4857-8c22-eee5a690cc29
x-usersessionid: 42137490-9be7-4216-bccc-7baed0659998
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D78A
x-officeversion: 16.0.17625.41013
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 1B4D8422DBD7EF35DDDD4E196881BB9C916E6562
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5b&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: B1DCDDEEF3594B72B26F9161DAA3A647 Ref B: SVG20EDGE0415 Ref C: 2024-05-01T14:55:54Z
date: Wed, 01 May 2024 14:55:54 GMT
content-length: 0
X-Firefox-Spdy: h2
13.107.42.12
23.38.200.39
13.94.214.133
52.111.224.12
40.126.53.21
52.108.240.5
52.109.28.46
0.0.0.0
0.0.0.0