1drv.ms/x/s!Ar8neDGtVnQvdstI8DwmmKER_Yw
301 Moved Permanently 0 B URL User Request GET HTTP/2 1drv.ms/x/s!Ar8neDGtVnQvdstI8DwmmKER_Yw
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
Fingerprint57:B0:C5:25:28:D0:75:FB:97:40:B6:55:BC:3F:15:BB:49:64:36:85
ValidityThu, 04 Jan 2024 21:21:38 GMT - Sun, 29 Dec 2024 21:21:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/s!Ar8neDGtVnQvdstI8DwmmKER_Yw HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?resid=2F7456AD317827BF!118&authkey=!AMtI8DwmmKER_Yw&ithint=file%2cxlsx
x-msnserver: AM3PPFA8433C869
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: GxF5FTPXs0iYDGF0sUxWtw.0
x-asmversion: UNKNOWN; 19.1381.322.2019
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DCC73525697043639FC95671516347E1 Ref B: OSL30EDGE0209 Ref C: 2024-04-25T05:41:43Z
date: Thu, 25 Apr 2024 05:41:42 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?resid=2F7456AD317827BF!118&authkey=!AMtI8DwmmKER_Yw&ithint=file%2cxlsx
302 Found 264 B URL User Request GET HTTP/2 onedrive.live.com/redir?resid=2F7456AD317827BF!118&authkey=!AMtI8DwmmKER_Yw&ithint=file%2cxlsx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectonedrive.com
Fingerprint74:60:B4:06:AB:E1:E4:E4:BC:D5:29:ED:EC:F2:EC:D4:C3:67:DD:8A
ValidityFri, 29 Mar 2024 05:42:16 GMT - Mon, 24 Mar 2025 05:42:16 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 19b46de562ade98db3b13c2d6b9f8d47
794804cc6329629ff36d4ebea7f6ab0aa4896e65
aa1f961b80f9778ed1a128ff499d925806e3d88eb898a667e22dce96c85ab51a
GET /redir?resid=2F7456AD317827BF!118&authkey=!AMtI8DwmmKER_Yw&ithint=file%2cxlsx HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 264
content-type: text/html; charset=utf-8
expires: -1
location: /edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
set-cookie: E=P:grvuY+pk3Ig=:iStguSF/EKOZYIEnNfy+I81lEjGnghL8lNthmDJu7QE=:F; domain=.live.com; path=/
xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 25-Apr-2024 04:01:44 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 75d447969b-lk76v
x-odwebserver: eurwesteur409473-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AF3410CFF0DC4E5EBB56ACC8C4E992E0 Ref B: SVG20EDGE0322 Ref C: 2024-04-25T05:41:44Z
date: Thu, 25 Apr 2024 05:41:43 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
353 B URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (351)
Hash 31c05f8e27abe3f85548a4c9735da1c4
306e842778d688f377166b13ad0b695b035d42eb
c31b75d03121f2238e3f54b375534e141b2844ccd01c2e9d22412b154ff9ac50
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 353
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: f183d6b8-101e-005d-55dc-94f513000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 7A4B57CC16D96BA3C1F929248F196219900A9883F9728999400DC133C90567ED00
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:46 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224790768,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023706.d6608f0&TotalRTCDNTime=1&CompressionType=br&FileSize=353"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
200 OK 191 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (36211)
Size 191 kB (190595 bytes)
Hash 83c28bc9280bff98c404aa9eadaa67ee
fe235fa5b4d836ffa9d8a10e7b76da1af6289390
90b2fafd05da9eae5c5f3c11a7b665ff3744899cc53c7aa823825d302ca1cf63
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 190595
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: fa33e1dd-501e-005c-4adc-94aacf000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: FA1BFFE6E12A97BAA5CC65A0936960BB2D124103183D653C659338CABD538F8E00
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:46 GMT
akamai-request-bc: [a=95.101.10.181,b=224790769,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023706.d6608f1&TotalRTCDNTime=1&CompressionType=br&FileSize=190595"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
c1-excel-15.cdn.office.net/x/_layouts/resources/FavIcon_Excel.ico
200 OK 7.9 kB URL GET HTTP/1.1 c1-excel-15.cdn.office.net/x/_layouts/resources/FavIcon_Excel.ico
IP
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.cdn.office.net
Fingerprint6B:A6:A1:1B:2D:4B:4A:C8:0A:39:FE:78:E6:1D:8C:96:4C:A8:33:C5
ValidityTue, 03 Oct 2023 19:12:51 GMT - Fri, 27 Sep 2024 19:12:51 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash d083642adab3d3db802fcf03f6849bce
4312ac50ec00eb39bff838ffb7c68de3e6385604
63bd80475830aa6933dc637e25a7a13f3773b1feef1feeb34f3c882344b088bb
GET /x/_layouts/resources/FavIcon_Excel.ico HTTP/1.1
Host: c1-excel-15.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=31536000
Content-Length: 7886
Content-Type: image/x-icon
Last-Modified: Mon, 25 Mar 2024 20:58:23 GMT
Accept-Ranges: bytes
ETag: "b6bfed2cf77eda1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: 904b0d7e-69a2-4f4e-914a-bdb02cc130af
X-UserSessionId: 904b0d7e-69a2-4f4e-914a-bdb02cc130af
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0002D591
X-OfficeVersion: 16.0.17609.42302
X-OfficeCluster: PNL1
X-Partitioning-Enabled: true
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
X-MSEdge-Features: afd_waccluster,afd_powerpointslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
X-MSEdge-Ref: Ref A: 80809B08FBE84FF5A62F80427F0A2E5C Ref B: HEL01EDGE1409 Ref C: 2024-04-14T09:41:22Z
Date: Thu, 25 Apr 2024 05:41:46 GMT
Connection: keep-alive
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
39 kB URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65476)
Hash 7e8696b25a28fb4e7ea773a68aa8dfe5
2f29d7054388390d0040a5bfd2e6bc02d0a759a6
2abca138c3c22fb15ec89db558736331b6afc0ff557a55b4d2fadab6116cc877
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 38697
last-modified: Sat, 20 Apr 2024 06:22:14 GMT
x-ms-request-id: 49d7e669-e01e-0059-61dc-947814000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 23FB0AD6A406C190F5D7D5100518A7C92596D259DABDA4709E47DF5E3FB508D200
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:46 GMT
akamai-request-bc: [a=95.101.10.181,b=224791210,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023706.d660aaa&TotalRTCDNTime=0&CompressionType=br&FileSize=38697"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=0, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.js
2.7 kB URL wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5825)
Hash 3f689e0da18a51bc2349f619506c8388
3a3b51bb0e8d5c085b9f30d1f1da0a88c094e3fb
1b614eeb1c42803ca31c6c52bdc272318ab6a410a25772016d73d37213c25abc
GET /wise-m/owl/5mttl/production/50/manifest.js HTTP/1.1
Host: wise-m.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 2681
last-modified: Tue, 23 Apr 2024 22:49:38 GMT
x-ms-request-id: 67670809-e01e-0059-38d0-957814000000
content-encoding: br
cache-control: max-age=300
date: Thu, 25 Apr 2024 05:41:46 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.108,b=250404225,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.6c0a655f.1714023706.eecdd81&TotalRTCDNTime=2&CompressionType=br&FileSize=2681"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
200 OK 48 kB URL GET HTTP/2 wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 5d885ac5e9957fa7fc2e12b8d8bfe27f
7869dc6df5c92ecec4825ba355a334d0065e3dbd
0f67723c2a54546380dd9cd6d77265902e973cb35455fb9d08f3ceb3fc62d1bd
GET /wise/owl/owl.slim.43b32de0474de28993ac.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 47462
last-modified: Tue, 23 Apr 2024 05:28:05 GMT
x-ms-request-id: 2742c44a-a01e-0048-7e40-95e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:46 GMT
akamai-request-bc: [a=95.101.10.108,b=250404436,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.6c0a655f.1714023706.eecde54&TotalRTCDNTime=6&CompressionType=br&FileSize=47462"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=6, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise.public.cdn.office.net/wise/owl/excel-boot.ae5f8583c5d3d5bd72ca.js
34 kB URL wise.public.cdn.office.net/wise/owl/excel-boot.ae5f8583c5d3d5bd72ca.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash a55d04aafe3f49ec2c0a5fb43b833c82
e5586da170e978eb6fbff5a686fcc68cc583b335
1a8a32f37111ee9acd27c9fc08ef89b526da2264a88ca15012f16889de3178a5
GET /wise/owl/excel-boot.ae5f8583c5d3d5bd72ca.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 33868
last-modified: Tue, 23 Apr 2024 05:28:02 GMT
x-ms-request-id: f029d672-d01e-0020-0740-958430000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:46 GMT
akamai-request-bc: [a=95.101.10.108,b=250404500,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.6c0a655f.1714023706.eecde94&TotalRTCDNTime=2&CompressionType=br&FileSize=33868"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 707
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=28b645434a619c74da3e14eff04b9877ce15fdfa5076ca2bbc7d0b08b41bd71d;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: d2765e65-c289-44ac-9ecc-bcaa19de4e71
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D757
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 94FE31B0DA9C460F97500D850605145A Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:47Z
date: Thu, 25 Apr 2024 05:41:46 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4494
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-Excel-ARRAffinity=003cfb3a2ce9f6c6438cd30fdfdb427f1c7178f17570824a4e6d9d18d5f61b69; path=/; secure; samesite=none
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
x-correlationid: e7cb27c2-20c3-4e68-bbfd-53f2cd8434bd
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D53E
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E80715665642481EA4E8905EF4D702BC Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:47Z
date: Thu, 25 Apr 2024 05:41:47 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
0 B URL excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 110
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; path=/; secure; samesite=none
access-control-allow-origin: https://onedrive.live.com
x-correlationid: 4a000fd5-fb77-4e90-845b-207d31549712
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D51B
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E19CCF886477496993EBD3CA71404014 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:47Z
date: Thu, 25 Apr 2024 05:41:47 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hB37BE9F7CDD384B4__layouts/Resources/1033/EwrDefault.css
26 kB URL res-1.cdn.office.net/officeonline/x/s/hB37BE9F7CDD384B4__layouts/Resources/1033/EwrDefault.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 55ca04484508f6b7ecbd7f0f1717209e
d05a51ebc1d25a96e0ddd395e72f0ccdd0a8fe39
b37be9f7cdd384b4449ba6c40a7677007c2aa4f4a784d21e7b5335c96c89a57a
GET /officeonline/x/s/hB37BE9F7CDD384B4__layouts/Resources/1033/EwrDefault.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25995
content-type: text/css
last-modified: Sun, 21 Apr 2024 01:48:10 GMT
x-ms-request-id: e6f93363-201e-000b-638d-9304fc000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224791978,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660daa&TotalRTCDNTime=1&CompressionType=br&FileSize=25995"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/excelframe.css
200 OK 11 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/excelframe.css
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e619872c04f517cb4d7b155151d053a4
87c9b13565825e2f793ff1dbee4b20b3c337177e
2d2cb26027dfe0057c9ecc49045a72ce61afef06a16786a29480f082380379af
GET /officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/excelframe.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10719
content-type: text/css
last-modified: Sun, 21 Apr 2024 07:33:41 GMT
x-ms-request-id: 72564fa9-701e-0029-40dd-93c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224791983,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660daf&TotalRTCDNTime=1&CompressionType=br&FileSize=10719"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h892E3D437217BF72__layouts/App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h892E3D437217BF72__layouts/App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/x/s/h892E3D437217BF72__layouts/App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Sun, 21 Apr 2024 07:30:43 GMT
x-ms-request-id: fbde45d0-b01e-0026-2cea-93b78f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224791994,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660dba&TotalRTCDNTime=1&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hC98043C4089CF795__layouts/App_Scripts/1033/Ewa.Strings.Wac.js
29 kB URL res-1.cdn.office.net/officeonline/x/s/hC98043C4089CF795__layouts/App_Scripts/1033/Ewa.Strings.Wac.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
Hash 3adeac633ae431b77dae28bb60b764e1
732ca8ea1dcb9e7fbf51074bcc3c1013acf42c2d
c98043c4089cf795c0c948d51f6c6d1f46b25ca4950296d7239828db298c8ad0
GET /officeonline/x/s/hC98043C4089CF795__layouts/App_Scripts/1033/Ewa.Strings.Wac.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28648
last-modified: Sat, 20 Apr 2024 15:35:54 GMT
x-ms-request-id: cb7af6dd-201e-0034-5b7e-96cc5f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792002,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660dc2&TotalRTCDNTime=1&CompressionType=br&FileSize=28648"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h878E5443CD5606C9__layouts/App_Scripts/gridRenderer.min.js
170 kB URL res-1.cdn.office.net/officeonline/x/s/h878E5443CD5606C9__layouts/App_Scripts/gridRenderer.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 170 kB (170000 bytes)
Hash 99d76264893a396e2e18edb77f6830b6
a92ff5676243d6c468c2ae1d028b13cb9e1655d9
878e5443cd5606c93d847b8bddd08918b683549457a3124aae94e790b048193c
GET /officeonline/x/s/h878E5443CD5606C9__layouts/App_Scripts/gridRenderer.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 170000
last-modified: Thu, 18 Apr 2024 23:32:54 GMT
x-ms-request-id: 9977d2fe-401e-0050-137e-963dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792010,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660dca&TotalRTCDNTime=1&CompressionType=br&FileSize=170000"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h6B5E9C489A723938__layouts/Resources/en-US/clientManifest.exp.js
32 kB URL res-1.cdn.office.net/officeonline/x/s/h6B5E9C489A723938__layouts/Resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash cf1236a9bae7ef927b01dc78be3d4627
4bf9f7e8c08dd76a72abc8597ce4bb9450832932
6b5e9c489a723938d19ee1651465aaa3a622ec27d64f2e950023c5133645fd36
GET /officeonline/x/s/h6B5E9C489A723938__layouts/Resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32086
last-modified: Thu, 18 Apr 2024 08:46:16 GMT
x-ms-request-id: 0f7f5907-a01e-0058-7b8b-9127c8000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792057,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660df9&TotalRTCDNTime=1&CompressionType=br&FileSize=32086"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h60F107C63C0D9836__layouts/App_Scripts/EwaTS.js
200 OK 872 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h60F107C63C0D9836__layouts/App_Scripts/EwaTS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (899)
Size 872 kB (872464 bytes)
Hash 1414bfeb9769b9ffd94307786e846866
54ec3cfb829e0862af3f4303c3422dab9728e3b0
60f107c63c0d98365953f14d752382752f1e51cabc095f7a1dcb3f2bbd357164
GET /officeonline/x/s/h60F107C63C0D9836__layouts/App_Scripts/EwaTS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 872464
last-modified: Thu, 18 Apr 2024 23:33:12 GMT
x-ms-request-id: 637bbd4a-f01e-0037-1b7e-962d3b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792001,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660dc1&TotalRTCDNTime=1&CompressionType=br&FileSize=872464"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h09A1411BF361D3D6__layouts/App_Scripts/fonts/sharedheaderplaceholder-icons.woff
2.9 kB URL res-1.cdn.office.net/officeonline/x/s/h09A1411BF361D3D6__layouts/App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 2944, version 4.30147
Hash 569a610df4fd269faa528a2197dfaa9a
cfc7596b939a341c5ddffc53cfd607745af18e8f
09a1411bf361d3d649f4ff5098e0197510232477bf099872f58f5d1ec483e9af
GET /officeonline/x/s/h09A1411BF361D3D6__layouts/App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2944
last-modified: Mon, 22 Apr 2024 23:34:37 GMT
x-ms-request-id: a2d8d9b8-301e-0028-5f39-959e3f000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792568,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660ff8&TotalRTCDNTime=1&CompressionType=&FileSize=2944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 20 Apr 2024 21:30:35 GMT
x-ms-request-id: c45bb28f-301e-004a-588d-935c18000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792567,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660ff7&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 20 Apr 2024 21:30:35 GMT
x-ms-request-id: c45bb28f-301e-004a-588d-935c18000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:47 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224792573,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023707.d660ffd&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hBFFACBE6EC577EA7__layouts/App_Scripts/es6/richTextEditor.min.js
62 kB URL res-1.cdn.office.net/officeonline/x/s/hBFFACBE6EC577EA7__layouts/App_Scripts/es6/richTextEditor.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 96ba1dfdd3f5fe91c0496dc1b1ca0603
f3b27d560ed65655c68e792ccd0b607c14dd49be
bffacbe6ec577ea7f3dc2c205c9a4c3062f8596f0f94daa5c0e212f2844625bf
GET /officeonline/x/s/hBFFACBE6EC577EA7__layouts/App_Scripts/es6/richTextEditor.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 62403
last-modified: Thu, 18 Apr 2024 23:38:06 GMT
x-ms-request-id: b1f43cc5-301e-004a-747f-965c18000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:48 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224794120,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023708.d661608&TotalRTCDNTime=1&CompressionType=br&FileSize=62403"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.16/rawguids/26892287593
200 OK 87 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.16/rawguids/26892287593
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 3.004; 2020Roboto-RegularRob
Hash 03c5228e2c48d273aad5e2a9b4fee634
bfd4e3e1524dd191ffff74049c27d1028cb8ed6c
1c974a9d4f2c4a220f3017c152078d035f283938fcac06e164ed14b4809e9ddb
GET /fs/4.16/rawguids/26892287593 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Fri, 30 Apr 2021 19:00:51 GMT
ETag: "0xD35FD9EA5F276E2B97CFCF5D7A83FE7F6D4B110B5978D0D737B76728F310F5AC"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=26892287593; filename*=UTF-8''26892287593
X-Azure-Ref: 0OkypYgAAAAApWLD9D4GTQrYm22GBVUwaTE9OMjFFREdFMTUxMABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 87165
Cache-Control: public, max-age=183728
Date: Thu, 25 Apr 2024 05:41:48 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.7/rawguids/50941620409
200 OK 506 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.7/rawguids/50941620409
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 22 tables, 1st "GDEF", 37 names, Microsoft, language 0x403, type 2 string, Normaloby
Size 506 kB (506404 bytes)
Hash e4f2fb7916fbe9e3fafec6aa1b53d0b7
1e59edbc060b32f5a6903dfbcefdf4124df1097d
eb0ab622969875cccbaa658809cc6df6bfd73846f9c6c5e80774936cbc52845c
GET /fs/4.7/rawguids/50941620409 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Tue, 23 Apr 2019 00:37:40 GMT
ETag: "0x178939ABA1E8A602911CDE0564920200E557D6568E6C74DF2AFEE537D0E55846"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=50941620409; filename*=UTF-8''50941620409
X-Azure-Ref: 0ihupYgAAAADSUjv11pkeSItPECRgaIEHTE9OMjFFREdFMTUwNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 506404
Cache-Control: public, max-age=185059
Date: Thu, 25 Apr 2024 05:41:48 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.7/rawguids/44327025345
200 OK 731 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.7/rawguids/44327025345
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 21 tables, 1st "EBDT", name offset 0x108c90
Size 731 kB (730601 bytes)
Hash b83db46379a90931dbcec27e30d37c0d
5b0730cdee0410861cfcf52b08dee774cbde25a4
1522f5c0f14d035c42540d84ad4d00d92b72240e91784c15c59e12921a1f0d79
GET /fs/4.7/rawguids/44327025345 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Tue, 23 Apr 2019 00:37:40 GMT
ETag: "0x3C2106B47456A73C36601651E03CDF12759BC76A9DB2B15BB1B25E0EADD314AF"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=44327025345; filename*=UTF-8''44327025345
X-Azure-Ref: 0t6CoYgAAAABwx/8nS2gnS7oDZcryE/4bTE9OMjFFREdFMDExNABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 730601
Cache-Control: public, max-age=181031
Date: Thu, 25 Apr 2024 05:41:48 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/x/s/hA56944A1D6301C03__layouts/App_Scripts/excelOnline.min.js
2.1 kB URL res-1.cdn.office.net/officeonline/x/s/hA56944A1D6301C03__layouts/App_Scripts/excelOnline.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (6787)
Hash 9fe133a807e1f560297f327da84731be
1b66ee6fbca13b226819db3835faa6240664c8c4
a56944a1d6301c034aa2e2d78c0019164a0aba578be9b92070f212d77b247691
GET /officeonline/x/s/hA56944A1D6301C03__layouts/App_Scripts/excelOnline.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2148
last-modified: Thu, 18 Apr 2024 23:33:26 GMT
x-ms-request-id: b69c85f4-501e-0001-557f-96a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:48 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224794935,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023708.d661937&TotalRTCDNTime=1&CompressionType=br&FileSize=2148"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.35/rawguids/31558910439
113 kB URL fs.microsoft.com/fs/4.35/rawguids/31558910439
IP
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 38 names, Macintosh, � 2023 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 113 kB (112673 bytes)
Hash ba8c6e656f57de263453f2e1520f742a
763bbc31b070e66b6ace4cfc6ccb953d896d0f6b
b3f0c16f69faa58b6e29664ed9a5bc2edac621d44b270fd03d55de797de3ef8f
GET /fs/4.35/rawguids/31558910439 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Tue, 01 Aug 2023 17:00:44 GMT
Accept-Ranges: bytes
ETag: "0x4E14FDC6DE54D603F0414F7D81885121E2D5CF9A9D3604BE3E1F2E420D53D440"
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=31558910439; filename*=UTF-8''31558910439
X-MSEdge-Ref: Ref A: F6E71C8173D044659F987A1E5BDDB444 Ref B: LON04EDGE0915 Ref C: 2023-10-23T12:18:07Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 112673
Cache-Control: public, max-age=209480
Date: Thu, 25 Apr 2024 05:41:48 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/x/s/h494AE42932343D70__layouts/App_Scripts/healthSmallOffline.worker.min.js
8.2 kB URL res-1.cdn.office.net/officeonline/x/s/h494AE42932343D70__layouts/App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (35371)
Hash be73523c970f0bfa1c8f0a8c51f80bfc
b3bc3fd464e0a5766f27f84ca8d0c30993a26275
494ae42932343d70f747f5937271e4bc7b020d53a1a2973876b15af26db7b1dc
GET /officeonline/x/s/h494AE42932343D70__layouts/App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8188
last-modified: Mon, 22 Apr 2024 09:26:21 GMT
x-ms-request-id: 6b56597f-801e-0012-7aa0-948447000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795406,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b0e&TotalRTCDNTime=1&CompressionType=br&FileSize=8188"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2243392BA2F37CAD__layouts/App_Scripts/EwaTS.tmcore.js
11 kB URL res-1.cdn.office.net/officeonline/x/s/h2243392BA2F37CAD__layouts/App_Scripts/EwaTS.tmcore.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (744)
Hash bb4f854414d5ce18c0fbec9b4816f5a1
672e90c90e17d5ca55c7f3df7a5b8e19ac7fcbf5
2243392ba2f37cad88f311a25050b20b5fb90470e958239bbda3e9cd8b9607e9
GET /officeonline/x/s/h2243392BA2F37CAD__layouts/App_Scripts/EwaTS.tmcore.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10954
last-modified: Thu, 18 Apr 2024 23:32:53 GMT
x-ms-request-id: cb7abf08-201e-0034-747e-96cc5f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795430,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b26&TotalRTCDNTime=1&CompressionType=br&FileSize=10954"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h5ECFB0C335336429__layouts/App_Scripts/1033/excel-app-intl.min.js
103 kB URL res-1.cdn.office.net/officeonline/x/s/h5ECFB0C335336429__layouts/App_Scripts/1033/excel-app-intl.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Size 103 kB (102812 bytes)
Hash bb8ded352a2b10252cb1afec1658d585
49b54ce60f147b0ee356b90cae778bfa835f9914
5ecfb0c335336429733281bff55f8b907335ae691ffe05191e28f0bd7c199ef2
GET /officeonline/x/s/h5ECFB0C335336429__layouts/App_Scripts/1033/excel-app-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 102812
last-modified: Thu, 18 Apr 2024 23:35:18 GMT
x-ms-request-id: 1d845935-b01e-0026-2f7f-96b78f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795463,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b47&TotalRTCDNTime=1&CompressionType=br&FileSize=102812"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h5566B4FB8CDB2425__layouts/App_Scripts/runtime.min.js
90 kB URL res-1.cdn.office.net/officeonline/x/s/h5566B4FB8CDB2425__layouts/App_Scripts/runtime.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (58580)
Hash 2c43e64f6886d6ec02ea338b1c2e64e5
917f52c7103e68025eb06b68fd41c57ab4485dba
5566b4fb8cdb2425e61cf3a8a9bd360c8ae652fba7a48d1d91c0f0404b6eccc9
GET /officeonline/x/s/h5566B4FB8CDB2425__layouts/App_Scripts/runtime.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 89535
last-modified: Thu, 18 Apr 2024 23:32:58 GMT
x-ms-request-id: 294dc08a-801e-004f-577f-968ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795464,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b48&TotalRTCDNTime=1&CompressionType=br&FileSize=89535"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h3A33C7BBC7F08B20__layouts/App_Scripts/common.min.js
200 OK 514 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h3A33C7BBC7F08B20__layouts/App_Scripts/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 514 kB (514120 bytes)
Hash 26bfa7464290b88ba44b899efac2e001
07d7b354dc38e320c4762be8d67f4686bc357210
3a33c7bbc7f08b20ed4e54324d5d0dffb981f51c4a518a03150df0136bf4c6df
GET /officeonline/x/s/h3A33C7BBC7F08B20__layouts/App_Scripts/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 514120
last-modified: Thu, 18 Apr 2024 23:33:01 GMT
x-ms-request-id: cb806135-201e-0034-577f-96cc5f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795465,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b49&TotalRTCDNTime=1&CompressionType=br&FileSize=514120"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hF7D8F850258667FF__layouts/App_Scripts/appChrome.min.js
200 OK 65 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hF7D8F850258667FF__layouts/App_Scripts/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 193cededa6afbfa517b78f86d6c8a99c
11511bdbe864d79280fc1163f0385fb7d6be8f9e
f7d8f850258667ff1ba071730dde0e305f22a0f570b34fed1e2befddfed3580f
GET /officeonline/x/s/hF7D8F850258667FF__layouts/App_Scripts/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 64990
last-modified: Thu, 18 Apr 2024 23:33:15 GMT
x-ms-request-id: 92e2efd8-e01e-0059-557f-967814000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224795480,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d661b58&TotalRTCDNTime=1&CompressionType=br&FileSize=64990"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 968b72dc-201e-0015-0f72-4cd5b1000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224796735,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d66203f&TotalRTCDNTime=1&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h66C70312DE6CA4E1__layouts/App_Scripts/otel.worker.min.js
200 OK 31 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h66C70312DE6CA4E1__layouts/App_Scripts/otel.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 2f1d74149f052d3354358e9856375219
8019f7a2ea824930f91c3ec375d926b650fb1cff
66c70312de6ca4e1d7ef1e858307764c241a80e7411cee686ea2fc2d74152749
GET /officeonline/x/s/h66C70312DE6CA4E1__layouts/App_Scripts/otel.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31172
last-modified: Wed, 24 Apr 2024 19:30:54 GMT
x-ms-request-id: 4c6286e7-701e-0064-2a83-960e0f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:49 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224796752,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023709.d662050&TotalRTCDNTime=1&CompressionType=br&FileSize=31172"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 05:41:49 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 05:41:50 GMT
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 9564d63f-8e8e-46c3-b985-b1c0fd69090d
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:50 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 03beec3147ac23323092f46c436abd99
49df7e79fb994bc0a0778357689b428ac22aa6ae
c4eaa4f735e096f4d054689483b2f77da1b577ebddf370741641d594ae00f985
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714023708779
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 6129
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=7e57eeadf8e5416da2f4531e8b34dcc7&HASH=7e57&LV=202404&V=4&LU=1714023710082; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 05:41:50 GMT; Path=/;Secure; SameSite=None
MS0=8b6e45a8cdee4f53847095cfeed99cdd; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 06:11:50 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1303
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:49 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 050943a7ab5ed90e4fcbcb9999c5edd0
5d3b15536b7dd13afc9e4d046dea32d8fc0eb921
ae51bca941314eb56fe4d91091a798a1585d1b625b02e9cb5059bd53bc25169d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714023708782
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1876
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 05:41:50 GMT; Path=/;Secure; SameSite=None
MS0=ec322f08e4a54b928824505b88f5ce3a; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 06:11:50 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1346
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:49 GMT
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 52795
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b51a08dc-22ea-43a3-80eb-db888072a174
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:50 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hC7AC1FC3EAF65730__layouts/App_Scripts/1033/excel-app-intl-lazy-exp.min.js
99 kB URL res-1.cdn.office.net/officeonline/x/s/hC7AC1FC3EAF65730__layouts/App_Scripts/1033/excel-app-intl-lazy-exp.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash d953fad3c54aacd9d83cde885525f041
af00fd8d73a8ddbd39646aced65c7b5a8824a46f
c7ac1fc3eaf657304c2e8554594293095d85cf76765af93d5f2611fff797a79e
GET /officeonline/x/s/hC7AC1FC3EAF65730__layouts/App_Scripts/1033/excel-app-intl-lazy-exp.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 98707
last-modified: Fri, 19 Apr 2024 02:00:27 GMT
x-ms-request-id: a01710eb-501e-005c-571f-92aacf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797421,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d6622ed&TotalRTCDNTime=1&CompressionType=br&FileSize=98707"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js
200 OK 287 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 287 kB (287159 bytes)
Hash 86eb7de8885b1eaa4a266aa3af837379
491f7fd7faabed3b435521bb375e688156cac4c5
8f8bc2280918fe66d056c0331611f216128e89081b2fe7f607649141b48ef7e2
GET /officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 287159
last-modified: Thu, 18 Apr 2024 23:33:15 GMT
x-ms-request-id: 306a63f6-301e-0028-077f-969e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797424,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d6622f0&TotalRTCDNTime=1&CompressionType=br&FileSize=287159"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h6CCEC7FF054E84C2__layouts/App_Scripts/appChromeLazy.min.js
200 OK 125 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h6CCEC7FF054E84C2__layouts/App_Scripts/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 125 kB (125347 bytes)
Hash 26a3805d91cb095b5c66f562b6295059
a3d5e8f9376cdec8360c60073c2577e4426c152b
6ccec7ff054e84c2fa13f978ca09b295699ddc988cc9c5bcf1e82806cf41cdcc
GET /officeonline/x/s/h6CCEC7FF054E84C2__layouts/App_Scripts/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 125347
last-modified: Thu, 18 Apr 2024 23:33:33 GMT
x-ms-request-id: 94fb0a87-701e-0029-417f-96c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797431,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d6622f7&TotalRTCDNTime=1&CompressionType=br&FileSize=125347"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h5E8ADC3008AACF0D__layouts/App_Scripts/EwaTS.bootCommon.js
16 kB URL res-1.cdn.office.net/officeonline/x/s/h5E8ADC3008AACF0D__layouts/App_Scripts/EwaTS.bootCommon.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (655)
Hash a0d4cb222fffc8df269cdcd632744b74
e25b83324cf4ee3110a1a5bf8debb54464bdfbb1
5e8adc3008aacf0d8b622a579ddef7e9d15c4dc9856f34e24bf54e590188d875
GET /officeonline/x/s/h5E8ADC3008AACF0D__layouts/App_Scripts/EwaTS.bootCommon.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16427
last-modified: Thu, 18 Apr 2024 23:33:54 GMT
x-ms-request-id: 4e0433e8-d01e-0030-1d7f-964158000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797434,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d6622fa&TotalRTCDNTime=1&CompressionType=br&FileSize=16427"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hDBD76FC737F26BC5__layouts/App_Scripts/EwaTS.tm.js
200 OK 46 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hDBD76FC737F26BC5__layouts/App_Scripts/EwaTS.tm.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1642)
Hash 2af804943db6bd607a00125798f262b6
eb24613c3e230909e2904b8505cdbcc29cdd803c
dbd76fc737f26bc530a242dd2749ef7382b97c6ea0cbcf1d2b623e96b91986e5
GET /officeonline/x/s/hDBD76FC737F26BC5__layouts/App_Scripts/EwaTS.tm.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 45642
last-modified: Thu, 18 Apr 2024 23:33:36 GMT
x-ms-request-id: b698a3ca-501e-0001-1a7e-96a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797436,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d6622fc&TotalRTCDNTime=1&CompressionType=br&FileSize=45642"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h666E9771159A9F79__layouts/App_Scripts/EwaTS.otherCommon.js
120 kB URL res-1.cdn.office.net/officeonline/x/s/h666E9771159A9F79__layouts/App_Scripts/EwaTS.otherCommon.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (559)
Size 120 kB (120474 bytes)
Hash 287d1770e343580954e374a4621efe74
f5795ff70c8e7c2ac5d9611669753cc6555a7fac
666e9771159a9f79ba96dafa69d8983cc835a55b265607fb6d3fc0c8e374a702
GET /officeonline/x/s/h666E9771159A9F79__layouts/App_Scripts/EwaTS.otherCommon.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 120474
last-modified: Thu, 18 Apr 2024 23:33:13 GMT
x-ms-request-id: ec43ef1d-001e-0041-4b7f-96a773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797456,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662310&TotalRTCDNTime=1&CompressionType=br&FileSize=120474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 74d003eb-ca03-460b-8af0-d710dfcc4967
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:50 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h2873C641056B99FC__layouts/App_Scripts/EwaTS.vrs.js
39 kB URL res-1.cdn.office.net/officeonline/x/s/h2873C641056B99FC__layouts/App_Scripts/EwaTS.vrs.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (8340)
Hash d41607ad0f63e6bf1ccb32a6cd4f7d43
0c94bdad2ae0857165358ab739a991071f05be8d
2873c641056b99fcc5e1c456e27e32d2206a8e9a2c0b394ac7d372381a2e6da5
GET /officeonline/x/s/h2873C641056B99FC__layouts/App_Scripts/EwaTS.vrs.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39043
last-modified: Thu, 18 Apr 2024 23:32:49 GMT
x-ms-request-id: 4c3aedb0-701e-0064-067e-960e0f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797457,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662311&TotalRTCDNTime=1&CompressionType=br&FileSize=39043"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h3B6CC550D1A3470A__layouts/App_Scripts/1033/common-intl.min.js
200 OK 37 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h3B6CC550D1A3470A__layouts/App_Scripts/1033/common-intl.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (56400)
Hash 11e2f9462e3d5ca823cb8cce9ea5b9cb
efcf6f368094fc751bf44109f7f75d78edf58d72
3b6cc550d1a3470ad128c0a5555dfa91658ea41a6b472e51cb939753ade771a3
GET /officeonline/x/s/h3B6CC550D1A3470A__layouts/App_Scripts/1033/common-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 37124
last-modified: Thu, 18 Apr 2024 23:35:34 GMT
x-ms-request-id: b0a141e7-901e-006c-2ff0-941400000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797458,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662312&TotalRTCDNTime=1&CompressionType=br&FileSize=37124"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hA89AA9341D5C7019__layouts/App_Scripts/EwaTS.cuixas.js
200 OK 145 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hA89AA9341D5C7019__layouts/App_Scripts/EwaTS.cuixas.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (688)
Size 145 kB (144782 bytes)
Hash 78ad6e07ef5c77017be34bbcc65ee446
272c0df8c44c47b02708a8786f12622cf2b57de3
a89aa9341d5c70196c303eea1078a345991e40f6fc2d908ffd0ae3f85a44d0f4
GET /officeonline/x/s/hA89AA9341D5C7019__layouts/App_Scripts/EwaTS.cuixas.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 144782
last-modified: Thu, 18 Apr 2024 23:33:15 GMT
x-ms-request-id: ea82fc34-701e-0016-117e-960940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797459,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662313&TotalRTCDNTime=1&CompressionType=br&FileSize=144782"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hE2F990058714AE27__layouts/App_Scripts/EwaTS.vrd.js
17 kB URL res-1.cdn.office.net/officeonline/x/s/hE2F990058714AE27__layouts/App_Scripts/EwaTS.vrd.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (15697)
Hash 324fd0974e9f25f7549e7134c7e3ed83
62d052c4746ea83a090110242ff468a1a0132866
e2f990058714ae27cb0ca2eddaf4ab505005ddb0c22b4e28e487ef796e5b47e5
GET /officeonline/x/s/hE2F990058714AE27__layouts/App_Scripts/EwaTS.vrd.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16795
last-modified: Thu, 18 Apr 2024 23:33:54 GMT
x-ms-request-id: 30646581-301e-0028-687e-969e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797460,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662314&TotalRTCDNTime=1&CompressionType=br&FileSize=16795"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h5C20584E8EFDC734__layouts/App_Scripts/EwaTS.cl.js
44 kB URL res-1.cdn.office.net/officeonline/x/s/h5C20584E8EFDC734__layouts/App_Scripts/EwaTS.cl.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (733)
Hash 2899c4c0de793c329bcd9e70533d963d
1699896a05f31919b298d10ec42a33ac986fafb7
5c20584e8efdc7345a80ae0431ea69d9f5692d57abf4f9bd59f0315111ce808e
GET /officeonline/x/s/h5C20584E8EFDC734__layouts/App_Scripts/EwaTS.cl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 44388
last-modified: Thu, 18 Apr 2024 23:33:14 GMT
x-ms-request-id: ec3f1644-001e-0041-2e7e-96a773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:50 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224797461,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023710.d662315&TotalRTCDNTime=1&CompressionType=br&FileSize=44388"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 54919
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: bee1ede1-c5f7-4807-a1ae-124e8a6599ff
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:51 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224799146,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023711.d6629aa&TotalRTCDNTime=1&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
19 kB URL wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 58710a3e1b60016505fd9c4f99bf1993
ad4e757c2a15289c6ed0b3d256be8f1cce83897d
ceefd9162f27f345af51330885265102751eb5ec65f72dcf762cb9a86a0572be
GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 19048
last-modified: Tue, 23 Apr 2024 05:28:02 GMT
x-ms-request-id: 352cdde9-a01e-002a-7945-952087000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:51 GMT
akamai-request-bc: [a=95.101.10.108,b=250412358,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.6c0a655f.1714023711.eecfd46&TotalRTCDNTime=1&CompressionType=br&FileSize=19048"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h00912EB91A4111A3__layouts/App_Scripts/EwaTS.pi.js
200 OK 145 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h00912EB91A4111A3__layouts/App_Scripts/EwaTS.pi.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (678)
Size 145 kB (145177 bytes)
Hash 25f35db07c287caa0b3be3511e04f82d
c92f7c8c3009343de5455662396531f57478f736
00912eb91a4111a399856150ceac2ae53aeb317b863a4af80a0d2ead897c3da4
GET /officeonline/x/s/h00912EB91A4111A3__layouts/App_Scripts/EwaTS.pi.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 145177
last-modified: Thu, 18 Apr 2024 23:33:48 GMT
x-ms-request-id: b6999ae1-501e-0001-5d7e-96a04b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:51 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224799739,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023711.d662bfb&TotalRTCDNTime=1&CompressionType=br&FileSize=145177"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:51 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash ff6cb84e0be261d3ba7573a2b79aed6e
1f6da7a96af902b47819c5a7d42b52b65f4ee717
4a43245106e0874b95dc5edec8fc630a06f82bf5ce87f245b1b9cd286313ca59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,fad3bd1d8e4b4c06894bd7bac80e4f02-67df67b4-f1fd-4ecd-9d55-4d41540b1757-7724,011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722
upload-time: 1714023710214
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 6183
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 1431
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:50 GMT
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 0085d8b8-a2db-4841-bb00-702948345be3
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:51 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hC4AE5268BEF77000__layouts/App_Scripts/jquery.js
28 kB URL res-1.cdn.office.net/officeonline/x/s/hC4AE5268BEF77000__layouts/App_Scripts/jquery.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Hash 0c113f73b209b146473ed0a7a59307b1
8a738e25e113d1822eff615853ca702818fe637d
c4ae5268bef77000a0b3d189ab188bcd5a819ed731d3e2577ff75e22a5ab37b7
GET /officeonline/x/s/hC4AE5268BEF77000__layouts/App_Scripts/jquery.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28055
last-modified: Fri, 19 Apr 2024 01:55:12 GMT
x-ms-request-id: 3351cc4c-e01e-0004-261b-927290000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224800669,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d662f9d&TotalRTCDNTime=1&CompressionType=br&FileSize=28055"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hE4A0E7A7EF39F13F__layouts/App_Scripts/jquery.signalr.min.js
200 OK 12 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hE4A0E7A7EF39F13F__layouts/App_Scripts/jquery.signalr.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (62133), with no line terminators
Hash 39e15ee4c61a0822733358976e1e1655
fd4177b58d009a2abb059175f2b1c32d1ebad47b
e4a0e7a7ef39f13f511322e90fb4deb5640348da25e2984c2cda9d8b3b7d030d
GET /officeonline/x/s/hE4A0E7A7EF39F13F__layouts/App_Scripts/jquery.signalr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12402
last-modified: Sun, 21 Apr 2024 05:17:56 GMT
x-ms-request-id: c98fafb7-201e-0069-24b1-93c6db000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224800682,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d662faa&TotalRTCDNTime=1&CompressionType=br&FileSize=12402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h18B3FE947AF2803F__layouts/App_Scripts/EwaTS.rt.js
200 OK 4.0 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h18B3FE947AF2803F__layouts/App_Scripts/EwaTS.rt.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (653)
Hash c8eed889b1d4bd59d68ec34072c4aec1
b625ca8f262bee3a21b383f794f7100856a80e34
18b3fe947af2803f446855a1724159dd0d651ac1f3d38f6ee0b9d862c71867f8
GET /officeonline/x/s/h18B3FE947AF2803F__layouts/App_Scripts/EwaTS.rt.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3959
last-modified: Thu, 18 Apr 2024 23:33:18 GMT
x-ms-request-id: e26fb2f2-e01e-0049-177e-96bd7c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224800685,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d662fad&TotalRTCDNTime=1&CompressionType=br&FileSize=3959"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 55975
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: d6eb82d9-0f5d-4b6d-8f23-9b474fcc9302
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:51 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h557711BE73CA9796__layouts/App_Scripts/uiSlice20.min.js
200 OK 261 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h557711BE73CA9796__layouts/App_Scripts/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (48522)
Size 261 kB (261130 bytes)
Hash 0872494f120ff323fb8133f7df980f02
8bbf7fc744f56a7187c3e9533e3964c75e27d0dc
557711be73ca97961044ff66d68ac6fd6da03a92a4797a0f5d64a430d9c48f81
GET /officeonline/x/s/h557711BE73CA9796__layouts/App_Scripts/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 261130
last-modified: Thu, 18 Apr 2024 23:33:34 GMT
x-ms-request-id: ae0eec94-001e-0051-5c7f-96621b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224800806,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d663026&TotalRTCDNTime=1&CompressionType=br&FileSize=261130"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hC37E74BC2800E4E0__layouts/App_Scripts/EwaTS.htmlsanitization.js
200 OK 7.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hC37E74BC2800E4E0__layouts/App_Scripts/EwaTS.htmlsanitization.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1775)
Hash 389e0a453f617cb941ae61c8da7b5b29
bb8c1ac7350d2f699470faa17ca6cf03ca63fd0a
c37e74bc2800e4e048d1f318bd0aee681e75618b56d0d240af251743ab75d4e6
GET /officeonline/x/s/hC37E74BC2800E4E0__layouts/App_Scripts/EwaTS.htmlsanitization.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7871
last-modified: Thu, 18 Apr 2024 23:32:56 GMT
x-ms-request-id: 1294ae24-301e-0017-117e-96569c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224801028,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d663104&TotalRTCDNTime=1&CompressionType=br&FileSize=7871"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlplt
200 OK 417 B URL POST HTTP/2 excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlplt
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlplt HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 10279
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 0c86a271-8a59-462c-ba4e-3cc825210b66
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 77EF8FCBCA0C403BADE0BE86D2F6EEC4 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:51 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h8D251AB8DC726A41__layouts/App_Scripts/1033/tellme-strings.min.js
200 OK 304 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h8D251AB8DC726A41__layouts/App_Scripts/1033/tellme-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (798), with no line terminators
Hash 988fdf519bceecc59036471f2c8e92ea
3c823eaa3d7bd573290962a501a0acb317a8ad05
8d251ab8dc726a41c8528673eee7a1808f24b3b52fe5f4c00a5d02dc8d234dff
GET /officeonline/x/s/h8D251AB8DC726A41__layouts/App_Scripts/1033/tellme-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 304
last-modified: Fri, 19 Apr 2024 06:57:11 GMT
x-ms-request-id: a086c3cc-501e-005c-612f-92aacf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224801453,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6632ad&TotalRTCDNTime=1&CompressionType=br&FileSize=304"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h89BF6B596C466BE1__layouts/App_Scripts/1033/excel-uiSlice20-sprite-exp.min.js
200 OK 165 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h89BF6B596C466BE1__layouts/App_Scripts/1033/excel-uiSlice20-sprite-exp.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 165 kB (165047 bytes)
Hash e0ee5c846043fa4b8737723342896c64
458340ef65f51d85e7931b9ed4ff252e51e62375
89bf6b596c466be17e09648e900b29ccbefcdbbdd7e568f37bb0e7e6383dee1c
GET /officeonline/x/s/h89BF6B596C466BE1__layouts/App_Scripts/1033/excel-uiSlice20-sprite-exp.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 165047
last-modified: Mon, 22 Apr 2024 15:23:13 GMT
x-ms-request-id: a14913f0-301e-0028-6cef-949e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224801454,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6632ae&TotalRTCDNTime=1&CompressionType=br&FileSize=165047"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2F95CDDC41D79343__layouts/Resources/1033/EwaCommon.png
19 kB URL res-1.cdn.office.net/officeonline/x/s/h2F95CDDC41D79343__layouts/Resources/1033/EwaCommon.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 208 x 190, 8-bit/color RGBA, non-interlaced
Hash 83514736b2cdad41bd1c9e3dff99e7de
a73744566f63327f9645bd93fe16451891597207
2f95cddc41d79343acd4194569538eb07ae5bdd1ec90469253f41ee5db530b67
GET /officeonline/x/s/h2F95CDDC41D79343__layouts/Resources/1033/EwaCommon.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19229
content-type: image/png
last-modified: Fri, 19 Apr 2024 13:49:08 GMT
x-ms-request-id: 1e14f043-801e-005f-0663-924bab000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224801523,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6632f3&TotalRTCDNTime=1&CompressionType=&FileSize=19229"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722
upload-time: 1714023712064
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1986
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 393
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:51 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetNamedSheetViewConversion?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22dbbb82f3-6e4d-41f5-83d0-165366548496%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A1%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%7D&waccluster=PNL1
200 OK 1.3 kB URL GET HTTP/2 excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetNamedSheetViewConversion?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22dbbb82f3-6e4d-41f5-83d0-165366548496%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A1%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash e1fa4bef0ca54152d4f9f1266585e554
3c03ea619607baef526f870b083e49a9c9ceb8a5
bd8ebe4adb55b19260b514a742ca6f2bcd59c2e1ec05b8176a29e2e46e6901f2
GET /x/_vti_bin/EwaInternalWebService.json/GetNamedSheetViewConversion?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22dbbb82f3-6e4d-41f5-83d0-165366548496%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A1%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: b47df748-12a7-49ef-adf7-8da977cdbdf4
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1263
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: b47df748-12a7-49ef-adf7-8da977cdbdf4
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 660A86E8CFE446B390032E67ABBFAE3D Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hC024BB8BA918915F__layouts/App_Scripts/1033/excel-uiSlice20-sprite.min.js
75 kB URL res-1.cdn.office.net/officeonline/x/s/hC024BB8BA918915F__layouts/App_Scripts/1033/excel-uiSlice20-sprite.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 00c7b3db83ef60ba914607aecfd703b0
244178757b5c31686b24c60535683ed2ba23edab
c024bb8ba918915f091c7008320bb9179cb08552cd5cc44c0ce9bd8ed5d75449
GET /officeonline/x/s/hC024BB8BA918915F__layouts/App_Scripts/1033/excel-uiSlice20-sprite.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 75098
last-modified: Mon, 22 Apr 2024 15:23:02 GMT
x-ms-request-id: a0def8a6-701e-0029-3bef-94c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224801455,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6632af&TotalRTCDNTime=1&CompressionType=br&FileSize=75098"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 78c97378-e0a2-430e-ac03-ff474fcc42aa
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/AddinServiceHandler.ashx?action=laststoreupdate&app=1&lc=en-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906
403 Forbidden 1.2 kB URL GET HTTP/2 excel.officeapps.live.com/x/_layouts/AddinServiceHandler.ashx?action=laststoreupdate&app=1&lc=en-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /x/_layouts/AddinServiceHandler.ashx?action=laststoreupdate&app=1&lc=en-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 3c8caccd-9b5a-467b-82d0-a4a71cd42592
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: CD68E7DA8E384232BBF4D451F3F806BF Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
0 B URL excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 117
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://onedrive.live.com
x-correlationid: f73e86e0-554d-4ec4-a685-66d13c57d4f5
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_powerpointslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 139CE6F0BF974163A266E3382ADE009F Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 5600
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
x-correlationid: 8581c8e3-30e7-4ec4-aced-aca2e5b656f6
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 61E2A34B5D104266AD6A54173CED87C2 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 247
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
x-correlationid: 81947c3d-0bb3-49f8-a2c6-8d926b9c3d85
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 2CA198DE65FB4FC8B3FDABAE674DC354 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h0222AC8B2748C216__layouts/App_Scripts/EwaTS.pid.js
200 OK 19 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h0222AC8B2748C216__layouts/App_Scripts/EwaTS.pid.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (614)
Hash f311059a15aed994cf298c7e5d6c66ec
212a01a726df3c7b0aeb7c75d54d34a2428f54d4
0222ac8b2748c216c784241284ed6eb389a3e09c4d51bd8a1289d5f2f3c001fe
GET /officeonline/x/s/h0222AC8B2748C216__layouts/App_Scripts/EwaTS.pid.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18722
last-modified: Thu, 18 Apr 2024 23:33:30 GMT
x-ms-request-id: 0eec22ee-d01e-0052-0d7e-96837f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802227,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6635b3&TotalRTCDNTime=1&CompressionType=br&FileSize=18722"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hDDACFF985568D458__layouts/Resources/1033/EwaOther_m2.png
22 kB URL res-1.cdn.office.net/officeonline/x/s/hDDACFF985568D458__layouts/Resources/1033/EwaOther_m2.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 365 x 364, 8-bit/color RGBA, non-interlaced
Hash a9403f931f82f021d07c891eb79b9466
6b3df3822be6d346c1fceaaf4a1ec577ab0a6d22
ddacff985568d4587ff00bcd1e6ec886c89eb143994d862a67338c356e3c42d6
GET /officeonline/x/s/hDDACFF985568D458__layouts/Resources/1033/EwaOther_m2.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22266
content-type: image/png
last-modified: Tue, 23 Apr 2024 09:28:01 GMT
x-ms-request-id: 9f6b4479-f01e-0018-1d82-9520f0000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:52 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802266,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023712.d6635da&TotalRTCDNTime=1&CompressionType=&FileSize=22266"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57351
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 6e8a9e8a-ed92-492f-b948-a80543ab45c8
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
202 Accepted 0 B URL POST HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,dmsactivityid,haep,x-accesstoken,x-accesstokenttl,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-allow-headers: content-type,dmsactivityid,haep,x-accesstoken,x-accesstokenttl,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
202 Accepted 11 kB URL POST HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash ab678c719a93b1eca82df99a91041d1a
ef4bed09847958c06d813029313f04a0297a4240
970191dbe14e6791c3fd4d054c6621d4448bc025d7292c8766b582837a1691a8
POST /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
Content-Type: application/json
DMSActivityId: 880088d1-65ff-4f84-9273-6a4eb0069535
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Length: 1847
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 11120
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 20672
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 98319fbe-32c4-478f-9b3e-4449bf6b920f
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: BBBF53AEFB5C4A239A458D31EA1ACA19 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: fe48d6d3-4bc1-4248-8719-79d0f7e84d79
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 34391
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 710942b2-9ac7-46bf-9408-3d003a36bef7
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: B94B3860088D467B94EBAF5725EC1822 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:52Z
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 6.0 kB URL GET HTTP/3 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 714b4c36df425688f7773ba227e99cd1
e920e6cb40f83004b6c3f9711a1da2b609fd2928
abc7f583392ee4c677a24c19366461fa51eccd6dc513520d3bd34db4a6bf908c
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: 34dd3dd3-832c-44cd-8427-8f7b5d8b47df
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
content-length: 6033
akamai-request-bc: [a=95.101.10.181,b=224802519,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d6636d7&TotalRTCDNTime=1&CompressionType=&FileSize=30746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=5, origin; dur=0 , cdntime; dur=5
akamai-cache-status: Miss from child, Hit from parent
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 54233
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 7794d2ac-8290-4c59-bfda-d00ec17080a9
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:52 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/strings/en/shellstrings.json
4.4 kB URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Hash 52af792134b43bb66ac6fb020ec0b324
7b8a12118ee106daa8fcece7625d1de871835a21
e08ca1be8adf907921f594f700e9267582333ba0a4337c820e8c937989301574
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4407
last-modified: Thu, 18 Apr 2024 08:48:33 GMT
x-ms-request-id: 4b065162-d01e-0052-308c-91837f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802587,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d66371b&TotalRTCDNTime=1&CompressionType=br&FileSize=4407"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hE32BF186F20AD8A1__layouts/App_Scripts/interactivity.min.js
200 OK 12 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hE32BF186F20AD8A1__layouts/App_Scripts/interactivity.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (58440)
Hash ef6405e233bc1d61285fc2e5d144142e
ea10dcd99c8d8b40dc7d5836105c4e49e0a166dd
e32bf186f20ad8a17ffdf14c5efdb3b144b6b55b4d0efa5fd9ad45a093dad725
GET /officeonline/x/s/hE32BF186F20AD8A1__layouts/App_Scripts/interactivity.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12487
last-modified: Thu, 18 Apr 2024 23:32:58 GMT
x-ms-request-id: 83786484-601e-0035-047f-969383000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802602,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d66372a&TotalRTCDNTime=1&CompressionType=br&FileSize=12487"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h6E6380D01ED704E4__layouts/App_Scripts/EwaTS.agave.js
200 OK 163 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h6E6380D01ED704E4__layouts/App_Scripts/EwaTS.agave.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (663)
Size 163 kB (163439 bytes)
Hash 407e0895745bb8ecc62ea4afee09a8f9
e9ebe5a47caf337be6953a3c3a30e26f761f8dbb
6e6380d01ed704e46a6554bef891b1853869b3b2aefd346c568d35e9fbd8f8e1
GET /officeonline/x/s/h6E6380D01ED704E4__layouts/App_Scripts/EwaTS.agave.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 163439
last-modified: Thu, 18 Apr 2024 23:33:14 GMT
x-ms-request-id: 294c27f2-801e-004f-2b7f-968ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802644,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663754&TotalRTCDNTime=1&CompressionType=br&FileSize=163439"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
200 OK 3.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (11364), with no line terminators
Hash d39049fe6408eb9e7755dcbdaf4a7fd8
ec4e643ccd31cd401a37e4421775ce6db14f17e4
37d31aff816c37f4e8c8b916f4028ca4ee2ba999c9f6018dacac39b3c5681b11
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3410
last-modified: Thu, 18 Apr 2024 08:49:00 GMT
x-ms-request-id: 20d22a73-001e-0041-4f8f-91a773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802649,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663759&TotalRTCDNTime=1&CompressionType=br&FileSize=3410"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 968b72dc-201e-0015-0f72-4cd5b1000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802708,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663794&TotalRTCDNTime=1&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/x/s/h2D2CB26027DFE005__layouts/Resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 20 Apr 2024 21:30:35 GMT
x-ms-request-id: c45bb28f-301e-004a-588d-935c18000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224802713,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663799&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.7/rawguids/44327025345
200 OK 731 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.7/rawguids/44327025345
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 21 tables, 1st "EBDT", name offset 0x108c90
Size 731 kB (730601 bytes)
Hash b83db46379a90931dbcec27e30d37c0d
5b0730cdee0410861cfcf52b08dee774cbde25a4
1522f5c0f14d035c42540d84ad4d00d92b72240e91784c15c59e12921a1f0d79
GET /fs/4.7/rawguids/44327025345 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Tue, 23 Apr 2019 00:37:40 GMT
ETag: "0x3C2106B47456A73C36601651E03CDF12759BC76A9DB2B15BB1B25E0EADD314AF"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=44327025345; filename*=UTF-8''44327025345
X-Azure-Ref: 0t6CoYgAAAABwx/8nS2gnS7oDZcryE/4bTE9OMjFFREdFMDExNABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 730601
Cache-Control: public, max-age=181026
Date: Thu, 25 Apr 2024 05:41:53 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:52 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224803037,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d6638dd&TotalRTCDNTime=1&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.35/rawguids/31558910439
113 kB URL fs.microsoft.com/fs/4.35/rawguids/31558910439
IP
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 38 names, Macintosh, � 2023 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 113 kB (112673 bytes)
Hash ba8c6e656f57de263453f2e1520f742a
763bbc31b070e66b6ace4cfc6ccb953d896d0f6b
b3f0c16f69faa58b6e29664ed9a5bc2edac621d44b270fd03d55de797de3ef8f
GET /fs/4.35/rawguids/31558910439 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Tue, 01 Aug 2023 17:00:44 GMT
Accept-Ranges: bytes
ETag: "0x4E14FDC6DE54D603F0414F7D81885121E2D5CF9A9D3604BE3E1F2E420D53D440"
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=31558910439; filename*=UTF-8''31558910439
X-MSEdge-Ref: Ref A: F6E71C8173D044659F987A1E5BDDB444 Ref B: LON04EDGE0915 Ref C: 2023-10-23T12:18:07Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 112673
Cache-Control: public, max-age=209475
Date: Thu, 25 Apr 2024 05:41:53 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
fs.microsoft.com/fs/4.7/rawguids/50941620409
200 OK 506 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.7/rawguids/50941620409
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 22 tables, 1st "GDEF", 37 names, Microsoft, language 0x403, type 2 string, Normaloby
Size 506 kB (506404 bytes)
Hash e4f2fb7916fbe9e3fafec6aa1b53d0b7
1e59edbc060b32f5a6903dfbcefdf4124df1097d
eb0ab622969875cccbaa658809cc6df6bfd73846f9c6c5e80774936cbc52845c
GET /fs/4.7/rawguids/50941620409 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Tue, 23 Apr 2019 00:37:40 GMT
ETag: "0x178939ABA1E8A602911CDE0564920200E557D6568E6C74DF2AFEE537D0E55846"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=50941620409; filename*=UTF-8''50941620409
X-Azure-Ref: 0ihupYgAAAADSUjv11pkeSItPECRgaIEHTE9OMjFFREdFMTUwNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 506404
Cache-Control: public, max-age=185054
Date: Thu, 25 Apr 2024 05:41:53 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.core.js
76 kB URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Hash bd4fd54157011269672f3f087d69db84
d0a284fdf9c1130c2b46617dc95548a9d4bfab28
b468a47f17a0dcb252993ca6b79a5846ec8a093092dde29788fc5c50a0392ed4
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76108
last-modified: Thu, 18 Apr 2024 08:48:43 GMT
x-ms-request-id: 6bb6fb04-f01e-006a-378c-9127bf000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224803868,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663c1c&TotalRTCDNTime=1&CompressionType=br&FileSize=76108"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h34948372351DA440__layouts/App_Scripts/uiFabricLazy.min.js
844 B URL res-1.cdn.office.net/officeonline/x/s/h34948372351DA440__layouts/App_Scripts/uiFabricLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (1838)
Hash b4bae6e14f10406f3d2170e0da56c61a
ffc3fad9407550862d25853d30ff4aab558b6612
34948372351da440a6cc7e09f113f136004b1517c3d5abe63e006bc0c746ada2
GET /officeonline/x/s/h34948372351DA440__layouts/App_Scripts/uiFabricLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 844
last-modified: Thu, 18 Apr 2024 23:33:07 GMT
x-ms-request-id: 92e1e237-e01e-0059-657f-967814000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:53 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224803869,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023713.d663c1d&TotalRTCDNTime=1&CompressionType=br&FileSize=844"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 37a032e85ae1b212255106f60eff93a9
d4932526175e6632c06c87539610d7e5ef467517
d0c3e6c8d25e655f19d3788bbf4982f52cba3498833d7d44ccf64e7e3f3de5a2
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722,fad3bd1d8e4b4c06894bd7bac80e4f02-67df67b4-f1fd-4ecd-9d55-4d41540b1757-7724
upload-time: 1714023712684
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 8209
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 1023
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:52 GMT
X-Firefox-Spdy: h2
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA
200 OK 0 B URL OPTIONS HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BD4
x-userhostaddress: 91.90.42.0
x-correlationid: 1dbe37ef-0f7d-4bee-901a-e9ed607781b7
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
x-officefe: AM1PEPF00025BD4
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
access-control-allow-headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-xhr
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DC289055187547899BAE119DA057D39C Ref B: SVG20EDGE0217 Ref C: 2024-04-25T05:41:53Z
date: Thu, 25 Apr 2024 05:41:53 GMT
content-length: 0
X-Firefox-Spdy: h2
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=ExcelOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
200 OK 294 B URL GET HTTP/2 ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=ExcelOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectecs.office.com
Fingerprint2C:34:3B:6E:1C:5E:55:9E:59:6A:13:FA:30:93:99:62:C7:BF:93:0D
ValiditySat, 30 Mar 2024 15:48:20 GMT - Tue, 25 Mar 2025 15:48:20 GMT
Hash 76afc8244046c214c9267d1610309d8a
b0b1af5a97aac81ab0ba3d1c9f271d0849561b8f
7d12b5e6b4602b6e9e61d3183c5f8559e43693eb9aa4051ba3e2fe3f73984b2f
GET /config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=ExcelOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 294
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 06:41:54 GMT
etag: "8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=OneShell&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://excel.officeapps.live.com
timing-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E5DA327D91F04DF090AE353E87B48B8C Ref B: OSL30EDGE0410 Ref C: 2024-04-25T05:41:54Z
date: Thu, 25 Apr 2024 05:41:53 GMT
X-Firefox-Spdy: h2
fs.microsoft.com/fs/4.16/rawguids/26892287593
200 OK 87 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.16/rawguids/26892287593
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 3.004; 2020Roboto-RegularRob
Hash 03c5228e2c48d273aad5e2a9b4fee634
bfd4e3e1524dd191ffff74049c27d1028cb8ed6c
1c974a9d4f2c4a220f3017c152078d035f283938fcac06e164ed14b4809e9ddb
GET /fs/4.16/rawguids/26892287593 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Fri, 30 Apr 2021 19:00:51 GMT
ETag: "0xD35FD9EA5F276E2B97CFCF5D7A83FE7F6D4B110B5978D0D737B76728F310F5AC"
Content-Type: application/octet-stream
Accept-Ranges: bytes
ApiVersion: Distribute 1.1
Content-Disposition: attachment; filename=26892287593; filename*=UTF-8''26892287593
X-Azure-Ref: 0OkypYgAAAAApWLD9D4GTQrYm22GBVUwaTE9OMjFFREdFMTUxMABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 87165
Cache-Control: public, max-age=183722
Date: Thu, 25 Apr 2024 05:41:54 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
47 kB URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (42919)
Hash d8153fbc27e90b6b135f4e052387c0a3
5fd83ab87c1bbc01e5eb9d3f2756f4514e98df89
2cabf7f8ac4b1f1a8309a72b060939fd95fee987a3304c1cf505d62cd1deb87a
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47298
last-modified: Thu, 18 Apr 2024 08:48:58 GMT
x-ms-request-id: 89c3dd9b-401e-0050-4e8c-913dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224805242,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023714.d66417a&TotalRTCDNTime=1&CompressionType=br&FileSize=47298"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712165
200 OK 33 kB URL GET HTTP/2 peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712165
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
Fingerprint09:66:CC:D9:31:FC:30:90:AB:DD:4F:75:CE:D5:DF:2B:D5:9B:45:21
ValidityFri, 12 Jan 2024 11:55:03 GMT - Mon, 06 Jan 2025 11:55:03 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 9cea6c36137d6bcced85a4ddb09ff896
36063dfd78e2a3f020dbdce2a21125c800e2c7af
0be23f239a21c41d4a70d7f588056d885bc2d758c45047907ba6962a61c742a9
GET /rtc2/signalr/negotiate?clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712165 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE8
x-userhostaddress: 91.90.42.0
x-correlationid: e1ba1b69-5284-4806-8873-8e60e402cf02
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
x-officefe: AM1PEPF00025BE8
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025BE8
x-officertcproxy: AM1PEPF00025C05
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
39 kB URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 0e90fdee574d409a29afaaec5dd66ef5
74555bb3aafaef1197f11f667fb5e1695ecb64a1
b622386f9e168e4a2792860704dfee9f91792d1bd6b5cc73308f0e2499a7fbc3
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.mast.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39359
last-modified: Thu, 18 Apr 2024 08:48:39 GMT
x-ms-request-id: 6fc5ec13-401e-001d-558c-91f22b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224805576,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023714.d6642c8&TotalRTCDNTime=1&CompressionType=br&FileSize=39359"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA
200 OK 1.6 kB URL OPTIONS HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 2e99d55ad90350c14dec88624bac6f4f
8562f518feacaeb19fef3fffda182614f758f311
2fecc628f651e2294e434f732643f891573719539a7e6dcc65e5601f7f622ba5
GET /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3D4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3D1714455705906&ClientId=%7Bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7D&usid=be2bec47-2a8e-4119-832e-1c387d251086&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-CorrelationId: 55679fd3-4526-4db2-a850-d57e3055de54
RTC-TokenProofkey: True
RTC-IsWacJsBootFsRequest: True
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, max-age=31535999
pragma: no-cache
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025C0C
x-userhostaddress: 91.90.42.0
x-correlationid: 55679fd3-4526-4db2-a850-d57e3055de54
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
x-officefe: AM1PEPF00025C0C
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025C0C
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D1EAF8C813ED40CEAF453F41AC312C97 Ref B: SVG20EDGE0217 Ref C: 2024-04-25T05:41:54Z
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7
0 B URL peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
Fingerprint09:66:CC:D9:31:FC:30:90:AB:DD:4F:75:CE:D5:DF:2B:D5:9B:45:21
ValidityFri, 12 Jan 2024 11:55:03 GMT - Mon, 06 Jan 2025 11:55:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://excel.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F5+HqgUXIepUgY7m27+VYw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PEU2
X-FrontEnd: RtcNetCoreLB1
X-MachineName: AM1PEPF00025C1A
X-UserHostAddress: 91.90.42.0
X-CorrelationId: e1ba1b69-5284-4806-8873-8e60e402cf02
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeFE: AM1PEPF00025C1A
X-OfficeVersion: 16.0.17609.41019
X-OfficeCluster: PEU2
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://excel.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
Sec-WebSocket-Accept: FEU9SxxjIjFZ6S6KdzZDxMRG02o=
Connection: Upgrade
Date: Thu, 25 Apr 2024 05:41:53 GMT
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash ff6cb84e0be261d3ba7573a2b79aed6e
1f6da7a96af902b47819c5a7d42b52b65f4ee717
4a43245106e0874b95dc5edec8fc630a06f82bf5ce87f245b1b9cd286313ca59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722
upload-time: 1714023714298
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 5596
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 394
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:53 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
200 OK 0 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
200 OK 0 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714023714549
0 B URL storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714023714549
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714023714549 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714023714&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: AM3PPF5B5B6AB85
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: IYkX06d8dkmTRauMJrV2dA.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 4212.9205
X-ClientErrorCode: PassportAuthFail
X-ErrorCodeChain: Unauthenticated
X-AsmVersion: UNKNOWN; 19.1402.419.2002
Date: Thu, 25 Apr 2024 05:41:54 GMT
Connection: close
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
200 OK 24 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714023714802
time-delta-to-apply-millis: 1346
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2631
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 140
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
200 OK 25 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=2F7456AD317827BF!118&resid=2F7456AD317827BF!118&ithint=file%2cxlsx&authkey=!AMtI8DwmmKER_Yw&wdo=2&cid=2f7456ad317827bf
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 794ff25b04d92b5b795a95e8a67df8de
bd881429d1dfe3dfe054d3490525079d4699e7e6
f1d96bf2c42f11222c6f048289d183554a4865914aafefe92cf73bb46bb85a59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714023714789
time-delta-to-apply-millis: 1303
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 60657
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 90
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714023714&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
11 kB URL login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714023714&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (24080)
Hash 229062a1791fdb63265723cd81b33b1d
8608e166c1946a4b1e393da7b071ffa70b7b655a
104fffdea0ff09a82209b3a0e917043a24ef98199b0a08e2f678fff62102c617
GET /login.srf?wa=wsignin1.0&rpsnv=150&ct=1714023714&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Thu, 25 Apr 2024 05:40:55 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C562_BL2
x-ms-request-id: 447f3c67-1cc4-4ff5-a047-73bb6ad84771
PPServer: PPV: 30 H: BL02EPF0001DA69 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=949cf37a3feb4c7383e791275142b324; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1714023715&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Tue, 20-May-2025 05:41:55 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-5b364444-a336-448b-b091-5bf6f4ce7a55; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DlS!F*4eqfE9M3kVhZ94XOP7AAlJ5NMKN2!aGcnnz7eKHGVsmCflzLlYgjYn32enJ77oRm6euRnffi1L8eC!gAXEHopqnkSEJvzXuHnq*aGY1L6*1zcEF3RMf!2H8G642MLwS2NxcX1epbMNgBQkpkK789WtQYpDLX8CCQfjlMuHATQ48EyyCgPJwA0RpwffDmkdBuUz3LGzDyN7CBwXtlx8qivQi38Z02yc983SXLohEbmW7MgFV*Z!qhbX2W2rAnFruq3CKJcH1!QzCC5z7vFS0raLPw2LivpGxm6Krnqj376lpt!xRghicq5fCnx!dZuZOLEfx5n2Ykmukn3mXv7DZ7mD6couuhr9J0DXlv9EhUOegox8jPcWoJFBdPX!SbDNVPCuXCGWG9cYh*h66h0uAtNnBY9NITnVmJkwU6gi; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Thu, 25 Apr 2024 05:41:54 GMT
Content-Length: 10799
res-1.cdn.office.net/officeonline/x/s/h6AC4A16DEB199DA2__layouts/App_Scripts/EwaTS.frd.js
200 OK 84 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h6AC4A16DEB199DA2__layouts/App_Scripts/EwaTS.frd.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (663)
Hash 990ec82f67288dedcea29f052589b0ef
2f0e3adf69c7c7136f94e8c9ff78122c1512d436
6ac4a16deb199da2e927aeba86de8f4039254575eccd012bc29cb499f14b1e2b
GET /officeonline/x/s/h6AC4A16DEB199DA2__layouts/App_Scripts/EwaTS.frd.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 84208
last-modified: Thu, 18 Apr 2024 23:33:17 GMT
x-ms-request-id: 4a7b5898-701e-0006-3c7e-96cc28000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224806606,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6646ce&TotalRTCDNTime=1&CompressionType=br&FileSize=84208"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hFB1987EB98333083__layouts/App_Scripts/copyPasteInfra.min.js
23 kB URL res-1.cdn.office.net/officeonline/x/s/hFB1987EB98333083__layouts/App_Scripts/copyPasteInfra.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash c323925b6514df7678dadde43e13b7ae
9b1d1dacacf26a2fc9e3365417cfb29900d6219d
fb1987eb98333083a180e5261fb15ab3acfde6ddb5a6bbb9953c9b82fd8fc882
GET /officeonline/x/s/hFB1987EB98333083__layouts/App_Scripts/copyPasteInfra.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22636
last-modified: Thu, 18 Apr 2024 23:33:19 GMT
x-ms-request-id: 41dd7cd2-201e-000b-417f-9604fc000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224806627,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6646e3&TotalRTCDNTime=1&CompressionType=br&FileSize=22636"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h70ADAF8608A4C899__layouts/App_Scripts/clipboardPlatform.min.js
200 OK 41 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h70ADAF8608A4C899__layouts/App_Scripts/clipboardPlatform.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash e0e5f7675df9a593e2dc2e852b6f24d3
f98832f387b650fe0caac43effbae7f68748f88f
70adaf8608a4c899757e77d91750223b0cdd084c63296917a65d423d9392f444
GET /officeonline/x/s/h70ADAF8608A4C899__layouts/App_Scripts/clipboardPlatform.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41307
last-modified: Thu, 18 Apr 2024 23:33:12 GMT
x-ms-request-id: 8376bda6-601e-0035-527f-969383000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224806628,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6646e4&TotalRTCDNTime=1&CompressionType=br&FileSize=41307"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h404B002DB3D43E42__layouts/App_Scripts/1033/Ewa.StatusBar.js
1.7 kB URL res-1.cdn.office.net/officeonline/x/s/h404B002DB3D43E42__layouts/App_Scripts/1033/Ewa.StatusBar.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13457), with no line terminators
Hash cd6c496343ea54d6785a148838e121f5
25de0a41b6d442f441d0d070b13de604eb0d91e7
404b002db3d43e42aeda84c1fe5ef54503f133c2906e5638c49eeded29961f8f
GET /officeonline/x/s/h404B002DB3D43E42__layouts/App_Scripts/1033/Ewa.StatusBar.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1716
last-modified: Sun, 21 Apr 2024 17:33:48 GMT
x-ms-request-id: dfad2b51-001e-001c-2418-94adf7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224806644,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6646f4&TotalRTCDNTime=1&CompressionType=br&FileSize=1716"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h7E86DF2AC06E3524__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
200 OK 18 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h7E86DF2AC06E3524__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4de42314d6edda70df9779762acc12b8
2af63137abc68c0910107f8598b7de48fd5bbd9c
7e86df2ac06e3524cb7bc6f0b8eb07565ba6d103eaf3cf1a30ac4c78f11a4eaa
GET /officeonline/x/s/h7E86DF2AC06E3524__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18308
last-modified: Sun, 21 Apr 2024 17:37:10 GMT
x-ms-request-id: 88a62013-d01e-0052-0219-94837f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224807198,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d66491e&TotalRTCDNTime=1&CompressionType=br&FileSize=18308"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712166
200 OK 54 B URL GET HTTP/2 peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712166
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
Fingerprint09:66:CC:D9:31:FC:30:90:AB:DD:4F:75:CE:D5:DF:2B:D5:9B:45:21
ValidityFri, 12 Jan 2024 11:55:03 GMT - Mon, 06 Jan 2025 11:55:03 GMT
Hash 293d4cc6dd528e7615522a837480486e
f64c7541af99681c1a7131099f069d0e54c7a2e2
cc28b3115c87326f6bf2208d0a8278052c91245465daa8a1132aa9a9790c91c7
GET /rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714023712166 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE8
x-userhostaddress: 91.90.42.0
x-correlationid: e1ba1b69-5284-4806-8873-8e60e402cf02
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
x-officefe: AM1PEPF00025BE8
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025BE8
rtcsessionid: 81f9369b-a41f-4bab-81b9-44df80f2ff5c
x-officertcproxy: AM1PEPF00025C05
date: Thu, 25 Apr 2024 05:41:54 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hAD21D8A56C03EC5D__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
124 kB URL res-1.cdn.office.net/officeonline/x/s/hAD21D8A56C03EC5D__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65443)
Size 124 kB (124178 bytes)
Hash 9fff1a71f430529a2234d6651b332078
84ce12fd1930b804c15521300f7e209ce96543e1
ad21d8a56c03ec5d9d00437b297110572af10136d5ddfa9bcd2abea6e174eab2
GET /officeonline/x/s/hAD21D8A56C03EC5D__layouts/App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 124178
last-modified: Sun, 21 Apr 2024 17:36:57 GMT
x-ms-request-id: c428eeff-b01e-0026-7387-94b78f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224807337,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6649a9&TotalRTCDNTime=1&CompressionType=br&FileSize=124178"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
200 OK 363 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 363 kB (363341 bytes)
Hash 6e4b65c20ddabdb9208ad52c2c33f311
8685a77bdac3baa6de9f066fc06ea3589fd4207c
e4e8090a58bb08834f25dfa9047c3eb1bcb8208972fe91c1d359479774cebc46
GET /officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 363341
last-modified: Thu, 18 Apr 2024 23:33:00 GMT
x-ms-request-id: 8f91cf26-f01e-0018-307f-9620f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224807359,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d6649bf&TotalRTCDNTime=1&CompressionType=br&FileSize=363341"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 55242
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: c5200a08-e845-4da6-96b5-f1ec88516438
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:55 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h49345C34D12CD00F__layouts/App_Scripts/EwaTS.edt.js
200 OK 71 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h49345C34D12CD00F__layouts/App_Scripts/EwaTS.edt.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2087)
Hash 99f2fea6e828272c59a03a877e61600f
3d681432b2ef6a6371b68859522ad2f007d30409
49345c34d12cd00f04b1c1d97c659a5410a4882154c5f142fa5a959636cd0397
GET /officeonline/x/s/h49345C34D12CD00F__layouts/App_Scripts/EwaTS.edt.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 70859
last-modified: Thu, 18 Apr 2024 23:33:17 GMT
x-ms-request-id: ec43f141-001e-0041-2f7f-96a773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:55 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224807828,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023715.d664b94&TotalRTCDNTime=1&CompressionType=br&FileSize=70859"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h8D7B8C265DF55DB9__layouts/App_Scripts/Feedback/latest/officebrowserfeedback.css
200 OK 2.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h8D7B8C265DF55DB9__layouts/App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (20551), with no line terminators
Hash 3d6ca9b0358bef8348220f958f049b61
8b85c3925fbc3d51e57658845a80c67f2101cc26
8d7b8c265df55db9c4be132ca6fe1ceebb0cfe89aa47992738cab92285c3afad
GET /officeonline/x/s/h8D7B8C265DF55DB9__layouts/App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2880
content-type: text/css
last-modified: Wed, 24 Apr 2024 21:33:30 GMT
x-ms-request-id: 082a6f25-c01e-002c-39a2-961338000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224808552,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d664e68&TotalRTCDNTime=1&CompressionType=br&FileSize=2880"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/x/s/161761842300__layouts/App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 786
last-modified: Thu, 18 Apr 2024 08:49:07 GMT
x-ms-request-id: 4939b287-e01e-0049-0a8c-91bd7c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224808557,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d664e6d&TotalRTCDNTime=1&CompressionType=br&FileSize=786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
upload-time: 1714023715759
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1808
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 573
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js
200 OK 287 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 287 kB (287159 bytes)
Hash 86eb7de8885b1eaa4a266aa3af837379
491f7fd7faabed3b435521bb375e688156cac4c5
8f8bc2280918fe66d056c0331611f216128e89081b2fe7f607649141b48ef7e2
GET /officeonline/x/s/h8F8BC2280918FE66__layouts/App_Scripts/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 287159
last-modified: Thu, 18 Apr 2024 23:33:15 GMT
x-ms-request-id: 306a63f6-301e-0028-077f-969e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224808621,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d664ead&TotalRTCDNTime=1&CompressionType=br&FileSize=287159"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetInstantaneousSupportInformation?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2236c234fc-75e5-4f1e-8b30-4a7756cf1a4e%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&previousResponseDigest=%22%22&waccluster=PNL1
2.7 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetInstantaneousSupportInformation?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2236c234fc-75e5-4f1e-8b30-4a7756cf1a4e%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&previousResponseDigest=%22%22&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 482df76caba93ce0f815434b65749499
2ae29911ae0f959806406be24298c785a0f7ef67
c49feed6c6b1c7f072e1946862ab2d3203666a897a44feb4cafb78be92e682f9
GET /x/_vti_bin/EwaInternalWebService.json/GetInstantaneousSupportInformation?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2236c234fc-75e5-4f1e-8b30-4a7756cf1a4e%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&previousResponseDigest=%22%22&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: da27a23a-0d5f-4a0d-a67d-2b6326f99b98
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 2713
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: da27a23a-0d5f-4a0d-a67d-2b6326f99b98
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 1B40D1C136EE4B2BA91FECD2F53148B8 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetMRUColors?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2244462856-097e-4bbb-98ac-46691a3b9283%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
200 OK 1.1 kB URL GET HTTP/2 excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetMRUColors?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2244462856-097e-4bbb-98ac-46691a3b9283%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 798300da0ac908646966ef5d4064ba19
f09a0c479c796142084c4a0366fa7dfef43e0261
1c218db8849add566c39b6c2c1644d61cdca22617a130ecac85fc92e038ecb84
GET /x/_vti_bin/EwaInternalWebService.json/GetMRUColors?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2244462856-097e-4bbb-98ac-46691a3b9283%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: f7ac4dbe-aea1-430a-95b7-4cec1e2c0d32
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1095
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: f7ac4dbe-aea1-430a-95b7-4cec1e2c0d32
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 477D836959274F98B69BBE210D27F4D0 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetFunctionList?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%221d940aa9-4a29-4825-aefa-873a5f4c6bef%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&functionOptions=%7B%22FilterType%22%3A0%7D&waccluster=PNL1
200 OK 39 kB URL GET HTTP/2 excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetFunctionList?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%221d940aa9-4a29-4825-aefa-873a5f4c6bef%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&functionOptions=%7B%22FilterType%22%3A0%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 34b98cfe76046b0bef0dcc0b1bb1c764
42e4883a407aa0ce579990d4066ba416d58e1633
3f2c6ef4e26c5c9fb14cef9f9feaf44218058877034f4fe6c7b4b696fdeec561
GET /x/_vti_bin/EwaInternalWebService.json/GetFunctionList?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%221d940aa9-4a29-4825-aefa-873a5f4c6bef%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&functionOptions=%7B%22FilterType%22%3A0%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: 29aa178b-27b9-4655-87a4-f4c3ecb6ab16
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=31536000
content-length: 38594
content-type: application/json; charset=utf-8
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 29aa178b-27b9-4655-87a4-f4c3ecb6ab16
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 5005F02BD2F7487A89C81F8BE150ECA5 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/NotifyFeatureLicensingStatus?waccluster=PNL1
1.1 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/NotifyFeatureLicensingStatus?waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash bb0a432cc893db2d7d27540790ddcb93
901c3750295018d9cb06a463f33bb6a4b314a900
f3ef87098016a79cf8e4beee915e2f8a259debd67f116efebb20b3eb7bce53d8
POST /x/_vti_bin/EwaInternalWebService.json/NotifyFeatureLicensingStatus?waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: a03bae03-3027-497c-9c38-163b67ab078f
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Length: 999
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1097
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: a03bae03-3027-497c-9c38-163b67ab078f
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: A9C535455CBF4C0D86F055E058E326D1 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Excel&version=16.0.17618.42300&language=en-US
2.5 kB URL ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Excel&version=16.0.17618.42300&language=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectecs.office.com
Fingerprint2C:34:3B:6E:1C:5E:55:9E:59:6A:13:FA:30:93:99:62:C7:BF:93:0D
ValiditySat, 30 Mar 2024 15:48:20 GMT - Tue, 25 Mar 2025 15:48:20 GMT
Hash d55b13ffbcc441b65995025333b77a12
8e1f3185d236a0615a2f5d4dfe085af5d36d3db3
a6cefff3f6beeede0b117bb6382f086d4306c7e05b6f229f42ff7b4cbec44f0f
GET /config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Excel&version=16.0.17618.42300&language=en-US HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 2497
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 06:41:56 GMT
etag: "QpG0+goZQguHmAoYFejKdjKEb9Bz6Qac10Va/KeNdyk="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=CHILL&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://excel.officeapps.live.com
timing-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 62F1078AEC4940458369604E3CDC7B59 Ref B: OSL30EDGE0410 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:55 GMT
X-Firefox-Spdy: h2
c4-excel-15.cdn.office.net/x/s/_layouts/App_Scripts/excel-boot.min.js
200 OK 34 kB URL GET HTTP/1.1 c4-excel-15.cdn.office.net/x/s/_layouts/App_Scripts/excel-boot.min.js
IP
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.cdn.office.net
Fingerprint95:57:10:20:D6:9A:96:3C:6C:12:F3:A3:75:32:33:77:B0:D8:93:C6
ValidityThu, 18 Jan 2024 22:15:44 GMT - Sun, 12 Jan 2025 22:15:44 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash acd60a58c0f24dac325da9c7c2658e7d
37e71ded99323d70b30ac62cd9bb5333f038690d
2a704a3234825dcebe99a6b956c5c5d316a2bcf5f853b910bc7741308a6d74db
GET /x/s/_layouts/App_Scripts/excel-boot.min.js HTTP/1.1
Host: c4-excel-15.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, max-age=21600
Content-Length: 34442
Content-Type: application/javascript
Content-Encoding: br
Expires: Thu, 25 Apr 2024 02:56:12 GMT
Last-Modified: Wed, 24 Apr 2024 09:49:32 GMT
Accept-Ranges: bytes
ETag: "b8410b52c96da1:0"
Server: Microsoft-IIS/10.0
request-id: 4b399b04-8e5b-f1ec-8bc4-58eee7ae90a8
X-BackEndHttpStatus: 200
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
Access-Control-Allow-Origin: *
X-CorrelationId: 966cff88-afb7-4b2a-ac42-9300e39b48ff
X-UserSessionId: 966cff88-afb7-4b2a-ac42-9300e39b48ff
Timing-Allow-Origin: *
X-OfficeFE: DM3PEPF000146F3
X-OfficeVersion: 16.0.17618.42300
X-OfficeCluster: PUS1
X-Partitioning-Enabled: true
Cross-Origin-Resource-Policy: cross-origin
X-Proxy-RoutingCorrectness: 1
X-MSEdge-Ref: MIRA: 4b399b04-8e5b-f1ec-8bc4-58eee7ae90a8 GVYP280CA0034 2024-04-24T20:56:12.202Z
X-Proxy-BackendServerStatus: 200
X-FirstHopCafeEFZ: GVX
X-FEProxyInfo: GVYP280CA0034.SWEP280.PROD.OUTLOOK.COM
X-FEEFZInfo: GVX
X-Powered-By: ASP.NET
X-FEServer: GVYP280CA0034
Date: Thu, 25 Apr 2024 05:41:56 GMT
Connection: keep-alive
res-1.cdn.office.net/officeonline/x/s/hEF2B6855B93C4CDC__layouts/App_Scripts/dialogControls.min.js
200 OK 2.0 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hEF2B6855B93C4CDC__layouts/App_Scripts/dialogControls.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10495)
Hash a833a08e8f841f53a721a1388500544b
996cbef054ea8c8ae064c957b844550008eb54d4
ef2b6855b93c4cdc9732de5269122e472a353ab46373bb046e5d222611cb66c8
GET /officeonline/x/s/hEF2B6855B93C4CDC__layouts/App_Scripts/dialogControls.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1996
last-modified: Thu, 18 Apr 2024 23:33:20 GMT
x-ms-request-id: ae0eee96-001e-0051-327f-96621b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224809296,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d665150&TotalRTCDNTime=1&CompressionType=br&FileSize=1996"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h3E9C4BBAEFE58A17__layouts/App_Scripts/osfruntime_xlo.js
200 OK 120 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h3E9C4BBAEFE58A17__layouts/App_Scripts/osfruntime_xlo.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (64817)
Size 120 kB (119632 bytes)
Hash 4b21023bd7500b1543137635157c081b
2e0dbd076fe31410079769d339ab61c17fa1e149
3e9c4bbaefe58a17c4baf062b390a7d95127ebca3bb64b614becf810c1f0148b
GET /officeonline/x/s/h3E9C4BBAEFE58A17__layouts/App_Scripts/osfruntime_xlo.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 119632
last-modified: Sun, 21 Apr 2024 17:32:17 GMT
x-ms-request-id: 0c4caf55-701e-005b-0766-95c6ac000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224809307,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d66515b&TotalRTCDNTime=1&CompressionType=br&FileSize=119632"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 3f139dcb-4636-4c50-89f5-c4619e572269
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:56 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetHasUntrustedImageUrls?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22685c2385-2c67-4372-a02b-962e73b9056b%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
1.1 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetHasUntrustedImageUrls?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22685c2385-2c67-4372-a02b-962e73b9056b%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 3564528e3ab317c888a1851f40e01e0a
599600f20f6a3aa57ae8addc9b6b33c00803f4eb
d381af9d46821f1471217fbbbaeb81ee4dabdf54d29f3904142c3ee30fa621f7
GET /x/_vti_bin/EwaInternalWebService.json/GetHasUntrustedImageUrls?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22685c2385-2c67-4372-a02b-962e73b9056b%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: 4b8491fe-698b-40fc-a622-476e5ff1b34e
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1115
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4b8491fe-698b-40fc-a622-476e5ff1b34e
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control
x-msedge-ref: Ref A: D9DECAF84A9A46FE94FF4EE41DF2B9B9 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
shared.officeapps.live.com/clipboard/shared.aspx?CreatorOrigin=https%3A%2F%2Fexcel.officeapps.live.com&usid=be2bec47-2a8e-4119-832e-1c387d251086&BulsEndpointUrl=https%3A%2F%2Feuc-excel-telemetry.officeapps.live.com%2Fxt%2FRemoteUls.ashx&corrid=e0e51b5f-f43b-4b1e-b4e9-dc14d5bf8848&NoAuth=true
1.1 kB URL shared.officeapps.live.com/clipboard/shared.aspx?CreatorOrigin=https%3A%2F%2Fexcel.officeapps.live.com&usid=be2bec47-2a8e-4119-832e-1c387d251086&BulsEndpointUrl=https%3A%2F%2Feuc-excel-telemetry.officeapps.live.com%2Fxt%2FRemoteUls.ashx&corrid=e0e51b5f-f43b-4b1e-b4e9-dc14d5bf8848&NoAuth=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 35f4e34397aa876dacf3c6ea4a40a971
0627129441e6959ebc72b89f4e377348a46c7d0c
3f83eff7ab9c6f7c0c7b2bbf1a5d9cb7956bce8440b2ad9309c7fcc6a9dab20e
GET /clipboard/shared.aspx?CreatorOrigin=https%3A%2F%2Fexcel.officeapps.live.com&usid=be2bec47-2a8e-4119-832e-1c387d251086&BulsEndpointUrl=https%3A%2F%2Feuc-excel-telemetry.officeapps.live.com%2Fxt%2FRemoteUls.ashx&corrid=e0e51b5f-f43b-4b1e-b4e9-dc14d5bf8848&NoAuth=true HTTP/1.1
Host: shared.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1110
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=a63039b63512214d8dcaa5ea468e03047a9b1fb029bdbe51f138a8f281b2e2a1;Path=/;Domain=shared.officeapps.live.com; samesite=none; secure
x-correlationid: e0e51b5f-f43b-4b1e-b4e9-dc14d5bf8848
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: AiEeevdgKBiq37XjJeDqmaccPhecbEm+bxflC7WOKkv5wnGfbdoVop99b8bLk4oXifN9pukpdcpoR4cipX8rbnEAAABueyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOmZhbHNlLCJmZWF0dXJlIjoiSGFwdGljc0RldmljZSIsImV4cGlyeSI6MTcxMzkxNjgwMH0=, AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
origin-agent-cluster: ?1
x-officefe: AM4PEPF0002D58C
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: same-site
x-officefd: AM4PEPF0002D4DC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 54A0D62A1D4D45D0A138AA1367D7A995 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetLinkedEntityMetadata?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%229bb9fbc7-5bc8-427e-be12-83672821f919%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
1.3 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetLinkedEntityMetadata?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%229bb9fbc7-5bc8-427e-be12-83672821f919%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b29de5073cf0f54dca832fa033105ea2
9f0967b73611902e7ef0444dc839a13ff5f1cf13
e5a502e0ca86e92990b75ffafe34d96ad74aee20db6619cdaae05f9dbda60010
GET /x/_vti_bin/EwaInternalWebService.json/GetLinkedEntityMetadata?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%229bb9fbc7-5bc8-427e-be12-83672821f919%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: c40c6e3d-e6b6-49ef-9c97-acdfcbc8cc2a
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1300
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: c40c6e3d-e6b6-49ef-9c97-acdfcbc8cc2a
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 40AF1E67D1514CE49FA3905F2DBBCD96 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
200 OK 363 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 363 kB (363341 bytes)
Hash 6e4b65c20ddabdb9208ad52c2c33f311
8685a77bdac3baa6de9f066fc06ea3589fd4207c
e4e8090a58bb08834f25dfa9047c3eb1bcb8208972fe91c1d359479774cebc46
GET /officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 363341
last-modified: Thu, 18 Apr 2024 23:33:00 GMT
x-ms-request-id: 8f91cf26-f01e-0018-307f-9620f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224809418,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d6651ca&TotalRTCDNTime=1&CompressionType=br&FileSize=363341"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 55437
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: a45bd12d-b06b-4b82-b323-f3700b6b993f
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:56 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
200 OK 363 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 363 kB (363341 bytes)
Hash 6e4b65c20ddabdb9208ad52c2c33f311
8685a77bdac3baa6de9f066fc06ea3589fd4207c
e4e8090a58bb08834f25dfa9047c3eb1bcb8208972fe91c1d359479774cebc46
GET /officeonline/x/s/hE4E8090A58BB0883__layouts/App_Scripts/excelOnlineCalc.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 363341
last-modified: Thu, 18 Apr 2024 23:33:00 GMT
x-ms-request-id: 8f91cf26-f01e-0018-307f-9620f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224809427,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023716.d6651d3&TotalRTCDNTime=1&CompressionType=br&FileSize=363341"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/admin/api/uxversion?bldVer=v1
0 B URL admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ms-mac-hostingapp,x-ms-mac-locale
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=d847f698-f1f2-45e4-a2e8-c998df1aaf74; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=d847f698-f1f2-45e4-a2e8-c998df1aaf74; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9592501A9039433DBB266AE196953050 Ref B: SVG20EDGE0106 Ref C: 2024-04-25T05:41:56Z
date: Thu, 25 Apr 2024 05:41:56 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/afhs/AppPrefetchResources.ashx
210 kB URL excel.officeapps.live.com/afhs/AppPrefetchResources.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Size 210 kB (209518 bytes)
Hash 2b55b4031016b79230363a76e3111639
aaaa1bf27c16c67656838c8c2e9345943137c9b8
443f1e634868ffb3abd171ff17156f69e618c672e5ca753c26bb0be2fc030b7d
POST /afhs/AppPrefetchResources.ashx HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
platform: Web
Content-Type: text/plain;charset=UTF-8
Content-Length: 1037
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313;Path=/;Domain=excel.officeapps.live.com; samesite=none; secure
x-correlationid: ac7ac3ec-8837-4334-aa58-49ae3708c8da
x-usersessionid: ac7ac3ec-8837-4334-aa58-49ae3708c8da
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D753
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-OfficeVersion, X-CorrelationId, X-OfficeFE
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
x-officefd: AM4PEPF0002D4EA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 01F61F0C46A64C21A47B476C4229A124 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:55Z
date: Thu, 25 Apr 2024 05:41:55 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/h43C5939CB732D8AA__layouts/App_Scripts/OfficeExtension.WacRuntime.js
200 OK 17 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/h43C5939CB732D8AA__layouts/App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 9cfefb2d46d6102dac2a24c606f47fea
076b63f4f46ce28648201e2507bbc67fb4f990c5
43c5939cb732d8aa2d20fce97f359f46b7c3b937e60ed576b752ae0a2e73314f
GET /officeonline/x/s/h43C5939CB732D8AA__layouts/App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16640
last-modified: Sat, 20 Apr 2024 21:26:56 GMT
x-ms-request-id: 283ac1e6-101e-0010-3579-933aff000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224810296,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d665538&TotalRTCDNTime=1&CompressionType=br&FileSize=16640"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/ReadRoamingString?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%223e1529cb-867a-4ba5-999c-1a632978a49a%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&roamingId=0&waccluster=PNL1
1.1 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/ReadRoamingString?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%223e1529cb-867a-4ba5-999c-1a632978a49a%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&roamingId=0&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash a033339bd389f341819ecb53d28287e2
6b7ff15c02e6342e7028b82c2b0bd060ad044c45
1d95d51fb82b1eb6e4b116fcec7100cbd821634af97b8d72ec7f94c60dc06b4d
GET /x/_vti_bin/EwaInternalWebService.json/ReadRoamingString?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%223e1529cb-867a-4ba5-999c-1a632978a49a%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&roamingId=0&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: 6c72afe3-3872-45ab-af41-483dfc4237ea
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1061
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 6c72afe3-3872-45ab-af41-483dfc4237ea
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7CB2AC5B340E4EA7935D17173DC29E94 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:57Z
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722
upload-time: 1714023716766
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1831
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 488
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2
0 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-clientsessionid,x-correlationid
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 25 Apr 2024 05:41:57 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-clientsessionid,x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: a6479601e30481d6d2d08a6d3bb21977
x-servicecorrelationid: a6479601-e304-81d6-d2d0-8a6d3bb21977
x-machine: OmexNode2000000__omexexternal-prod-frc-2-001_0
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 1c3105f9-abc8-4039-b6b2-821a2ed5ab38
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
admin.microsoft.com/admin/api/uxversion?bldVer=v1
2.3 kB URL admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash fa25a88145828e4f344426503714be3a
f3dcc3d9e57a34101faf0d033890a72793ded5e9
fb2dc73bcf46a340b1305eb2e6ed550f2f0f0c61e7f66327d1eb06b068934aaa
GET /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ms-mac-locale: en
x-ms-mac-hostingapp: wac-2156-floodgate-sdk
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2257
content-type: application/json; charset=utf-8
expires: -1
set-cookie: s.SessID=45b2c7ec-c9d5-4d3f-9212-978d75598e3a; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=45b2c7ec-c9d5-4d3f-9212-978d75598e3a; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 624daed1-5aeb-450a-9a70-9aeba4922134
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 214A36C07B2A4085927C9B64D32CBD72 Ref B: SVG20EDGE0106 Ref C: 2024-04-25T05:41:57Z
date: Thu, 25 Apr 2024 05:41:56 GMT
X-Firefox-Spdy: h2
c1-shared-15.cdn.office.net/clipboard/s/161761842300_App_Scripts/sharedclipboard.min.js
15 kB URL c1-shared-15.cdn.office.net/clipboard/s/161761842300_App_Scripts/sharedclipboard.min.js
IP
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 41a287501f168923777eac049c946f5c
eec3a0a07d6efb02e82961face1e4d22ca1e8e53
148521c735aeae6f6570e868bcefa649708e09ca390627af7a21333a902ec2e9
GET /clipboard/s/161761842300_App_Scripts/sharedclipboard.min.js HTTP/1.1
Host: c1-shared-15.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shared.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=31536000
Content-Length: 14724
Content-Type: application/javascript
Content-Encoding: br
Last-Modified: Tue, 23 Apr 2024 04:55:05 GMT
Accept-Ranges: bytes
ETag: W/"abf5a1683a95da1:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: b3a39c1f-abb3-47cc-99dc-8c22a7986a19
X-UserSessionId: b3a39c1f-abb3-47cc-99dc-8c22a7986a19
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0002D500
X-OfficeVersion: 16.0.17615.42310
X-OfficeCluster: PNL1
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-OFFICEFD: AM4PEPF0002D4DD
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
X-MSEdge-Ref: Ref A: C20F7E46AB794501B376F8406626C4A2 Ref B: HEL01EDGE1921 Ref C: 2024-04-23T04:55:05Z
Date: Thu, 25 Apr 2024 05:41:57 GMT
Connection: keep-alive
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2
2.3 kB URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash c99f3a1e395c9be5ae0b29198a42946c
0b12aa1f7c3616d93118c5373437dc7523a7c6a9
47ea900a5b7935d90116c5f92b523337d199fd68e146bcd3a1919e4465d1f1cd
GET /campaignmetadataaggregator?country=US&locale=en-US&app=2156&platform=Web&version=16.0.17618.42300&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPNL1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bexcelfloodgateflight46%3Bexcelfloodgateflight54%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=excelfloodgateflight46%3Bexcelfloodgateflight54%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-clientsessionid: e3ff9dcb-af92-4fe7-af11-934cc20a3b18
x-correlationid: e98b6064-12f3-4213-ac20-98d245864752
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 05:41:57 GMT
content-type: text/plain; charset=utf-8
server: Microsoft-HTTPAPI/2.0
access-control-allow-origin: *
x-activitytraceid: d9c82ff60f7949ca45ac2ae3f5ef0dc3
x-servicecorrelationid: d9c82ff6-0f79-49ca-45ac-2ae3f5ef0dc3
x-machine: OMEXNODE2000001__omexexternal-prod-frc-2-001_1
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 89968369-597c-4606-9e67-1896c307aca5
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hEBA3B0C789A04CB2__layouts/App_Scripts/addInLazy.min.js
30 kB URL res-1.cdn.office.net/officeonline/x/s/hEBA3B0C789A04CB2__layouts/App_Scripts/addInLazy.min.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 43a58ad77947cb42fa4ec2321b7513b6
33adaa772aef888be5f9c04ba66e22cc4a4e1acb
eba3b0c789a04cb264e72322f907bc6ceaec9b3f0cbdbb75ff4803837373d4dc
GET /officeonline/x/s/hEBA3B0C789A04CB2__layouts/App_Scripts/addInLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 29972
last-modified: Thu, 18 Apr 2024 23:33:01 GMT
x-ms-request-id: b274c7d2-001e-000c-377f-96689f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811120,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d665870&TotalRTCDNTime=1&CompressionType=br&FileSize=29972"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/h436C1453D61203B6__layouts/App_Scripts/1033/formula-authoring-strings.min.js
11 kB URL res-1.cdn.office.net/officeonline/x/s/h436C1453D61203B6__layouts/App_Scripts/1033/formula-authoring-strings.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (49890), with no line terminators
Hash eee52fe819318453d171d1c77d68912d
ff85a0de4bba9b1cdf8c2c2228954604d4576926
436c1453d61203b669c908e71cce47c5a9f290c7e693632720ea20ef31b1ae39
GET /officeonline/x/s/h436C1453D61203B6__layouts/App_Scripts/1033/formula-authoring-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10862
last-modified: Wed, 24 Apr 2024 19:33:11 GMT
x-ms-request-id: 180bf5fd-f01e-0055-0b8c-96ef1c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811130,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d66587a&TotalRTCDNTime=1&CompressionType=br&FileSize=10862"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 56a6b153-6f48-4d99-a692-cc07531ad3a5
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:57 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/x/s/161761842300__layouts/Resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1475
content-type: text/css
last-modified: Thu, 18 Apr 2024 08:44:20 GMT
x-ms-request-id: bf85d4b9-a01e-0048-4d8c-91e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811176,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d6658a8&TotalRTCDNTime=1&CompressionType=br&FileSize=1475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/progress.gif
644 B URL res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 24 x 24
Hash f2983bb5ee7ee6482736051893b0c7e6
b9ef21fb58a310e6d8b5a6dc38f7cc85e8659071
79b48a07e8b202282bd8ec6ab7aac909eaa359da349fe822fac69e1f6e2991ec
GET /officeonline/x/s/161761842300__layouts/Resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 644
content-type: image/gif
last-modified: Thu, 18 Apr 2024 08:44:56 GMT
x-ms-request-id: 54156fba-b01e-0026-4d8c-91b78f000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811187,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d6658b3&TotalRTCDNTime=1&CompressionType=&FileSize=644"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
0 B URL euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3081
Origin: https://shared.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://shared.officeapps.live.com/
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: c6ea09ff-4e58-41c5-bee5-032b23b1690c
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://shared.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:57 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/moe_status_icons.png
200 OK 6.1 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/x/s/161761842300__layouts/Resources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6140
content-type: image/png
last-modified: Thu, 18 Apr 2024 08:43:58 GMT
x-ms-request-id: f0d2d9c2-e01e-003b-348c-91ba33000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811196,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d6658bc&TotalRTCDNTime=1&CompressionType=&FileSize=6140"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/agavedefaulticon96x96.png
200 OK 1.1 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/Resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/x/s/161761842300__layouts/Resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1115
content-type: image/png
last-modified: Thu, 18 Apr 2024 08:44:57 GMT
x-ms-request-id: f044c0c1-f01e-0037-7e8c-912d3b000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811217,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d6658d1&TotalRTCDNTime=1&CompressionType=&FileSize=1115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
259 kB URL res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12695)
Size 259 kB (258890 bytes)
Hash 574fd73194781626aca55c81f59d43f6
c83c3630eb878ca247e0c6235d674277271fec69
a7c7314646ad30c6042053cc2d4ddcf0daad63d0f4826a68c6237ef260d48c93
GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 258890
last-modified: Mon, 22 Apr 2024 19:13:12 GMT
x-ms-request-id: 52560014-401e-0050-541e-953dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.36.79.7,b=872899545,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.074f2417.1714023717.340763d9&TotalRTCDNTime=3&CompressionType=br&FileSize=258890"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=3, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/AddinServiceHandler.ashx?action=getUserId&app=excel&corr=a3b56c31-f812-5419-c83b-8262fcae85cb&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906
403 Forbidden 1.2 kB URL GET HTTP/2 excel.officeapps.live.com/x/_layouts/AddinServiceHandler.ashx?action=getUserId&app=excel&corr=a3b56c31-f812-5419-c83b-8262fcae85cb&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /x/_layouts/AddinServiceHandler.ashx?action=getUserId&app=excel&corr=a3b56c31-f812-5419-c83b-8262fcae85cb&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F2F7456AD317827BF%21118&access_token=4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%5FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%5FBBcrkNQBpi6%5Fkua1hHohXeNlt2oZPvVKFEDUk%2D%5FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%2DBzCjLoosYfrhE8NvuXsc3rQr%2D9Y&access_token_ttl=1714455705906 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: bc06fbe6-a161-4875-b69e-d34f89a188d7
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 008236B337EA42E882E9734FAC25AB50 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:57Z
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/hF2E4650DCED7471A__layouts/App_Scripts/EwaTS.kpae.js
200 OK 37 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/hF2E4650DCED7471A__layouts/App_Scripts/EwaTS.kpae.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1163)
Hash d71eb8680bd385f8921a79a78f53b7d7
796f8c56a84aee70fe73344c1583c4876f177508
f2e4650dced7471a9652c8634419355bb1feaf5ac9daa94889ac5c922058eb51
GET /officeonline/x/s/hF2E4650DCED7471A__layouts/App_Scripts/EwaTS.kpae.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36691
last-modified: Thu, 18 Apr 2024 23:33:39 GMT
x-ms-request-id: 83781f48-601e-0035-657f-969383000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811294,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d66591e&TotalRTCDNTime=1&CompressionType=br&FileSize=36691"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 54502
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 1fcfd87b-57b2-48ff-b6eb-614a9d82df44
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:57 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/BrokenFormulasTelemetry?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22eebcc6ed-c4c8-4fc8-bcbe-d44cf8213823%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
200 OK 1.1 kB URL GET HTTP/2 excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/BrokenFormulasTelemetry?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22eebcc6ed-c4c8-4fc8-bcbe-d44cf8213823%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash cdd12c2d88262cedcc96f89e63a86a46
d47d05c9559c92e346ebff7177c96a16f941c5e6
3a070079ea62bc6526e8662fe35dc258704d19f74fde34e190e9fe593028a3af
GET /x/_vti_bin/EwaInternalWebService.json/BrokenFormulasTelemetry?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22eebcc6ed-c4c8-4fc8-bcbe-d44cf8213823%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-CorrelationId: e1f47019-506c-47e5-a1c5-370bf07ecaf9
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1093
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e1f47019-506c-47e5-a1c5-370bf07ecaf9
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_pptcapacity,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2F5B6AE0A1F846388FD3857E1BA03943 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:41:58Z
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?1573d8a7_a57a0c49_1714023717945
0 B URL store.office.com/gatedserviceextension.aspx?1573d8a7_a57a0c49_1714023717945
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?1573d8a7_a57a0c49_1714023717945 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 05:41:58 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-6NqIwAmUTlpmK/VZu5XLv0Er4NSLfOrNCfIS1n+YMbM=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: f3fe3e84571e5b67afe107d0b00e1d39
x-correlationid: f3fe3e84-571e-5b67-afe1-07d0b00e1d39
x-machine: OMEXNODES000000__omexexternal-prod-weu-001_0
x-buildversion: 24.4.10415.11006
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: 86190c9e-d150-4093-8001-a7749143a4cd
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 37a032e85ae1b212255106f60eff93a9
d4932526175e6632c06c87539610d7e5ef467517
d0c3e6c8d25e655f19d3788bbf4982f52cba3498833d7d44ccf64e7e3f3de5a2
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722,d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360
upload-time: 1714023717776
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 11325
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 369
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ms-mac-appid,x-ms-mac-hostingapp,x-ms-mac-version
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=ebf5d81d-7037-4f8b-941d-7b25070f0ee0; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=ebf5d81d-7037-4f8b-941d-7b25070f0ee0; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BA8CAA92F6A24C958413F1DB21F38582 Ref B: SVG20EDGE0106 Ref C: 2024-04-25T05:41:58Z
date: Thu, 25 Apr 2024 05:41:57 GMT
content-length: 0
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
0 B URL admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-ms-mac-hostingapp: wac-2156-floodgate-sdk
x-ms-mac-appid: ccafb9ed-00af-447a-8b45-15e24b55e9db
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 7489
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=d10cdd6f-f6a1-4e99-8b38-3e351b755ef6; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=d10cdd6f-f6a1-4e99-8b38-3e351b755ef6; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: 040064f7-5180-412a-858a-ab26a1372b59
access-control-allow-origin: https://excel.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8AA56157A28A4ECABE82B80339630CB0 Ref B: SVG20EDGE0106 Ref C: 2024-04-25T05:41:58Z
date: Thu, 25 Apr 2024 05:41:57 GMT
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: fa135ee3-fb32-407b-9217-37d28e432478
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: ea01087e-0bf8-47d0-8b87-3ffb0b48eb38
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57882
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 8e271e99-985d-4e78-94f4-7bd2dbf56a17
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:58 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
200 OK 0 B URL OPTIONS HTTP/2 euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?waccluster=PNL1&officeserverversion=16.0.17618.42300&usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 60436
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 8e1a03c2-fd34-4715-bd24-2dd186aa69b0
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PNL1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:41:58 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://excel.officeapps.live.com/
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://excel.officeapps.live.com
date: Thu, 25 Apr 2024 05:41:58 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL POST HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash bc1f22a523f94e6dfc3603247f8daf3e
ced5dae5ff1ed26dc6c9d55cec79b0a2dd3766a9
904c2d527eb0936335ee85c1dfa72c07e27082db9542db51c5849464575cc852
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360,011776870b754a649aedc9456ac07a97-6bd8247c-11d3-4599-b599-ec9ef6d401f6-6722
upload-time: 1714023718825
time-delta-to-apply-millis: 1431
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 399183
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 210
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:41:58 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%224ef2e046-6143-4216-88fa-2525f435651c%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
200 OK 1.1 kB URL GET HTTP/2 excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%224ef2e046-6143-4216-88fa-2525f435651c%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d82be2e898f3bc1ec95575a44b0baecf
9424653b6c18436114c0cb94434a08ca2633176d
2cfe882a78953a6562d44af3a3e3f7eeb76b5493b4e68baf3c1b340d641df7f6
GET /x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%224ef2e046-6143-4216-88fa-2525f435651c%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-ClientBootEpochTimeStamp: 1714023707.3260443
X-CorrelationId: 4ec8b085-db19-4874-a5fe-3fd54b0b7428
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1061
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4ec8b085-db19-4874-a5fe-3fd54b0b7428
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E1D680F435A042CFB0E224C1773922C1 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:03Z
date: Thu, 25 Apr 2024 05:42:03 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2252321e7b-1db4-4965-8589-8b7cf97edb04%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
1.1 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2252321e7b-1db4-4965-8589-8b7cf97edb04%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4d5013d01063116409cf3befca8cdd1d
b04e8edd1dbef0e3fb0994d4aac72b27be1f6f39
bdf5fa4f1911db3116b763bc32cec0f38a1b78ae1d852ec1a91247681db04b3a
GET /x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%2252321e7b-1db4-4965-8589-8b7cf97edb04%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-ClientBootEpochTimeStamp: 1714023707.3260443
X-CorrelationId: 68b001cf-7f8b-44b0-befc-b320e8b85380
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1058
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 68b001cf-7f8b-44b0-befc-b320e8b85380
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: 85668FD579CC42B4B82C831E6314CF71 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:08Z
date: Thu, 25 Apr 2024 05:42:08 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22ad5ed1e1-2de9-4bef-afb2-01481b496584%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
1.1 kB URL excel.officeapps.live.com/x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22ad5ed1e1-2de9-4bef-afb2-01481b496584%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 60b1138bbe745d00b5bd6daa61485c8d
0fa88285dad663d2d1506119730f30385c67ae99
c733353f2ddfec04112aa9703de51f55c082c4010db4fe4ec8fec6f43f3c362b
GET /x/_vti_bin/EwaInternalWebService.json/GetSessionStatus?context=%7B%22WorkbookMetadataParameter%22%3A%7B%22WorkbookMetadataState%22%3A%7B%22MetadataVersion%22%3A0%2C%22ServerEventVersion%22%3A0%7D%7D%2C%22ClientRequestId%22%3A%22ad5ed1e1-2de9-4bef-afb2-01481b496584%22%2C%22InstantaneousType%22%3A0%2C%22MakeInstantaneousChange%22%3Afalse%2C%22SessionId%22%3A%2215.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX%2BQw%3D%3D16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S%22%2C%22TransientEditSessionToken%22%3A%22HIvbX%2BTGX0SOSozipDFKuQ%3D%3D%22%2C%22PermissionFlags%22%3A786431%2C%22Configurations%22%3A1573648%2C%22CompleteResponseTimeout%22%3A0%2C%22IsWindowHidden%22%3Afalse%2C%22IsWindowVisible%22%3Atrue%2C%22CollaborationParameter%22%3A%7B%22CollaborationState%22%3A%7B%22UserListVersion%22%3A2%2C%22CollabStateId%22%3A0%7D%7D%2C%22MachineCluster%22%3A%22PNL1%22%2C%22AjaxOptions%22%3A0%2C%22ReturnSheetProcessedData%22%3Afalse%2C%22HasAnyNonOcsCoauthor%22%3Afalse%7D&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeVersion: 16.0.17618.42300
X-WacCluster: PNL1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-WacNoAuth: 1
X-XL-SessionId: 15.AM4PEPF0002D4F81.A108.1.U36.dca6eee8-c56f-4dcd-ab8f-579d82783f3914.5.en-US5.en-US16.2f7456ad317827bf1.S24.mT7utsMtrU6HuxlV7uX+Qw==16.16.0.17618.4230014.5.en-US5.en-US1.M1.N0.1.S
X-ClientBootEpochTimeStamp: 1714023707.3260443
X-CorrelationId: 34614e7a-b984-45d0-8baf-ed3612891ea9
X-UserType: WOPI
haep: 2
X-Key: DyFisHvZqr7TaQeG3EDQB9sg4c+zESXPTbsId7JCzHM=;Ee8ck2pIEb1Q/hWYic7nBJLTLuGfVyAZCzEAsJO4o9A=,638496205073260443
X-AccessToken: 4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS_UkYcfZW1rYpuQaKgtByzEjpFAOAIX_BBcrkNQBpi6_kua1hHohXeNlt2oZPvVKFEDUk-_VeyWHknSwBO0fOyNv8n0sCGyn5Ws-BzCjLoosYfrhE8NvuXsc3rQr-9Y
X-AccessTokenTtl: 1714455705906
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=0
content-length: 1061
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 34614e7a-b984-45d0-8baf-ed3612891ea9
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 16399A3235464E26B8D28BE7561326BF Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:13Z
date: Thu, 25 Apr 2024 05:42:13 GMT
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
0 B URL common.online.office.com/suite/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 615
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=8dc6c5fff66fa395b9400d8f76b0555996a75bb422b30a77fd9d123c52e48c4c;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: fd4a6340-cd30-48bf-a2e5-6ea72ec62042
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D762
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: 9C71E661F5D04005ADE90539AF3950DE Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:16Z
date: Thu, 25 Apr 2024 05:42:16 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1562
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=28b645434a619c74da3e14eff04b9877ce15fdfa5076ca2bbc7d0b08b41bd71d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6357cf69-b910-4c87-a52c-24e031fdef8e
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D757
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 7ECF6DD92373416EABA5215A73B7E0E4 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:16Z
date: Thu, 25 Apr 2024 05:42:16 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/AppSettingsHandler.ashx?app=Excel&usid=be2bec47-2a8e-4119-832e-1c387d251086&build=20240421.7
2.2 kB URL excel.officeapps.live.com/x/AppSettingsHandler.ashx?app=Excel&usid=be2bec47-2a8e-4119-832e-1c387d251086&build=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c5704a5e9c0845b5537ead0cba38ee0f
b2cda9f340f0e5105adc2d453cbccc0fe1a259df
1ae8cb8d4c00a8f532771eb8a2b8cda0f1a9797edd7376a5ccb078185a49e76c
GET /x/AppSettingsHandler.ashx?app=Excel&usid=be2bec47-2a8e-4119-832e-1c387d251086&build=20240421.7 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2214
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; path=/; secure; samesite=none
access-control-allow-origin: https://onedrive.live.com
x-correlationid: e9599dcb-e521-4833-b440-13885c102130
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 048DA26E824D455689456619A1ACAA1B Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:16Z
date: Thu, 25 Apr 2024 05:42:16 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintB9:00:B1:F7:B4:F9:08:38:B4:12:F8:CE:C1:04:0E:14:D7:6D:87:08
ValiditySat, 30 Mar 2024 16:47:22 GMT - Tue, 25 Mar 2025 16:47:22 GMT
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4917
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: -8
access-control-allow-headers: Connection,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://excel.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:42:16 GMT
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 580
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=28b645434a619c74da3e14eff04b9877ce15fdfa5076ca2bbc7d0b08b41bd71d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: cd878284-65da-4275-8f7e-e00da051e593
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D757
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4DB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 16E1A211F31245A68F032BD36099F995 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 2111
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 5eeadf00-abda-4e75-a2d9-8e3c9a35cd79
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: EE6AAF7EF9E742D1B06C57AC8EC8B9E0 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=CloseWorkbook
423 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=CloseWorkbook
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4ecbbbfdc6ae61258850356ea2853b25
af2e6edc2b9e13f784ee8f4b0ce96ac7c983c384
f78d2f0efca64e99cbddf8950da678cc3d92b329a39af88eca9f8be665380eca
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=CloseWorkbook HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 1082
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 423
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 653749ba-99e4-4848-bdad-4189a9433ba1
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D62922E1036147D68F9E2B8B84E7633A Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.15&apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157&upload-time=1714023737792&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&time-delta-to-apply-millis=1303&w=0&NoResponseBody=true
0 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.15&apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157&upload-time=1714023737792&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&time-delta-to-apply-millis=1303&w=0&NoResponseBody=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.15&apikey=a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157&upload-time=1714023737792&ext.intweb.msfpc=GUID%3D11c9ce15123c45509ea2c019e2a520f5%26HASH%3D11c9%26LV%3D202404%26V%3D4%26LU%3D1714023710128&time-delta-to-apply-millis=1303&w=0&NoResponseBody=true HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3068
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=11c9ce15123c45509ea2c019e2a520f5&HASH=11c9&LV=202404&V=4&LU=1714023710128; MS0=ec322f08e4a54b928824505b88f5ce3a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 41
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 05:42:16 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=XlpltWithPageLoadMetrics
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=XlpltWithPageLoadMetrics
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=XlpltWithPageLoadMetrics HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 10521
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 396002ee-e1db-48f1-a3e7-4acf9699bd3f
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 9723BFDD045A42AE9016103AC79CF267 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlrte
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlrte
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlrte HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 1185
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 0beca543-06a3-4678-b012-6a3f61b4c935
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 743BF094B2D94B9BBDFDB88774C48978 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
200 OK 0 B URL POST HTTP/2 excel.officeapps.live.com/x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x/_layouts/RemoteTelemetry.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 951
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: f35a519e-766b-4b8f-8de9-77befe62bc3a
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: E55E8943832C465FAA78BD78EEC7945F Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
content-length: 0
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlsvc
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlsvc
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlsvc HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 7367
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 5012625a-46ec-46de-94cb-cf1092aeaef6
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest
x-msedge-ref: Ref A: AF11F859727648F1A0E3A2B5DAA73997 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/WsaUpload.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1&WacUserType=WOPI&ckey=DyFisHvZqr7TaQeG3EDQB9sg4c%2BzESXPTbsId7JCzHM%3D%3BEe8ck2pIEb1Q%2FhWYic7nBJLTLuGfVyAZCzEAsJO4o9A%3D%2C638496205073260443&haep=1
122 B URL excel.officeapps.live.com/x/_layouts/WsaUpload.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1&WacUserType=WOPI&ckey=DyFisHvZqr7TaQeG3EDQB9sg4c%2BzESXPTbsId7JCzHM%3D%3BEe8ck2pIEb1Q%2FhWYic7nBJLTLuGfVyAZCzEAsJO4o9A%3D%2C638496205073260443&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /x/_layouts/WsaUpload.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&build=16.0.17618.42300&waccluster=PNL1&WacUserType=WOPI&ckey=DyFisHvZqr7TaQeG3EDQB9sg4c%2BzESXPTbsId7JCzHM%3D%3BEe8ck2pIEb1Q%2FhWYic7nBJLTLuGfVyAZCzEAsJO4o9A%3D%2C638496205073260443&haep=1 HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 17507
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 692b78cb-6d7a-4b3e-94af-ff1462c7ec6e
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: 24B93A0699DF42DDBA02C9CEFE217014 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlend
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlend
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlend HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 15684
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: c1758974-19a0-427d-8996-3116b2aa14a7
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control
x-msedge-ref: Ref A: 1FA171B4F0BD4AAC8A59E0E1B15E4959 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xleno
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xleno
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xleno HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 4748
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: e8036000-89d1-4c05-a8d5-2d8620afa14c
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 74C0DE443640418DA6784144C0C149A2 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlenc
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlenc
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=Xlenc HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 3266
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: f4f010e1-b0a4-4ed3-b227-ee9d46f12f38
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 18B132A2F6F74CBCBD1E5E10822C5131 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=TraceMsg
417 B URL excel.officeapps.live.com/x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=TraceMsg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 295f0a0f0bb4e3b6f9bda35f1ef7f3a3
134afefe91f71a7f4ac84c0eee9a40410e59f4ce
acabd3ff7630fd9567c493f4e4ea461be5fb87f51b31a6117837135845c72654
POST /x/_layouts/BeaconHandler.ashx?WacUserType=WOPI&usid=be2bec47-2a8e-4119-832e-1c387d251086&NoAuth=1&waccluster=PNL1&WebMethod=TraceMsg HTTP/1.1
Host: excel.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Content-Type: text/plain;charset=UTF-8
Content-Length: 2972
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; PNL1-Excel-ARRAffinity=492a88e146643e3d43b8dff829498553d21e8f6bfaa6a7960aa43df2e7e404f3; PNL1-Excel-ARRAffinity=2f4989e9516bc5d2963b3ad5a8d13c70a0089dd3851c69c24c4f133db32581e5; ShCLSessionID=1714023713064_0.757484365601617; PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 417
content-type: text/plain; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
access-control-allow-origin: https://excel.officeapps.live.com
x-correlationid: 286f7bc0-53f7-4ee7-88dd-650a0eb0574a
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
timing-allow-origin: *
x-officefe: AM4PEPF0002D4F8
x-officeversion: 16.0.17618.42300
x-officecluster: PNL1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 582D2E4EF7584450A652D4BB90127EF5 Ref B: SVG20EDGE0214 Ref C: 2024-04-25T05:42:17Z
date: Thu, 25 Apr 2024 05:42:17 GMT
X-Firefox-Spdy: h2
euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
0 B URL euc-excel-telemetry.officeapps.live.com/xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /xt/RemoteUls.ashx?usid=be2bec47-2a8e-4119-832e-1c387d251086&officeserverversion=20240421.7 HTTP/1.1
Host: euc-excel-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 181
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 90637b38-b400-4730-9620-8ec6d492283f
x-usersessionid: be2bec47-2a8e-4119-832e-1c387d251086
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF0001199D
x-officeversion: 16.0.17618.42300
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://excelonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF0001199D
set-cookie:
date: Thu, 25 Apr 2024 05:42:17 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
200 OK 106 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30298)
Size 106 kB (105772 bytes)
Hash 89a218ddab054ddc4c43d08ecc0a2d25
2bb4f01c5cd8dae82afccc5a9f5ce35c0f94927f
bd8c3e57a02276353eba9fed640873f0fdb73ab6d582c4b732a53c5f44cc26cf
GET /officeonline/x/s/161761842300__layouts/App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 32790
last-modified: Thu, 18 Apr 2024 08:48:38 GMT
x-ms-request-id: c46d2027-601e-0068-668c-919907000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:54 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224805565,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023714.d6642bd&TotalRTCDNTime=1&CompressionType=br&FileSize=32790"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/1033/osfruntime_strings.js
200 OK 12 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/x/s/161761842300__layouts/App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (11667), with no line terminators
Hash a1d892f1368c7f3b1dfb75057b936b66
91ec4980bfa5b301199b574e6240a618247679f9
2db70125e37f651d09a6d03d593a65e09668e6267cca1257251328517f7eaefc
GET /officeonline/x/s/161761842300__layouts/App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://excel.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://excel.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 2223
last-modified: Thu, 18 Apr 2024 08:47:13 GMT
x-ms-request-id: 5603795f-901e-0031-3a8c-911e84000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 05:41:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.181,b=224811112,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.b50a655f.1714023717.d665868&TotalRTCDNTime=1&CompressionType=br&FileSize=2223"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7
101 Switching Protocols 0 B URL GET HTTP/1.1 peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://excel.officeapps.live.com/x/_layouts/xlviewerinternal.aspx?unified=1&ui=en-US&rs=en-US&hid=erAO%2B3A8yEe%2BfCFsAL%2BX2Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F2F7456AD317827BF!118&wdo=2&wde=xlsx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=be2bec47-2a8e-4119-832e-1c387d251086&usid=be2bec47-2a8e-4119-832e-1c387d251086&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Force_SingleStepBoot&xlel=1&instantedit=1
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
Fingerprint09:66:CC:D9:31:FC:30:90:AB:DD:4F:75:CE:D5:DF:2B:D5:9B:45:21
ValidityFri, 12 Jan 2024 11:55:03 GMT - Mon, 06 Jan 2025 11:55:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F2F7456AD317827BF%2521118%26access_token%3d4wLDSzk6uVZIiZDeV5aplGf4wMexchelOZZpLYbsfAgsBPS%255FUkYcfZW1rYpuQaKgtByzEjpFAOAIX%255FBBcrkNQBpi6%255Fkua1hHohXeNlt2oZPvVKFEDUk%252D%255FVeyWHknSwBO0fOyNv8n0sCGyn5Ws%252DBzCjLoosYfrhE8NvuXsc3rQr%252D9Y%26access_token_ttl%3d1714455705906&ClientId=%7bb6ee3e99-2dc3-4ead-87bb-1955eee5fe43%7d&usid=be2bec47-2a8e-4119-832e-1c387d251086&WacUserType=WOPI&mid=AM1PEPF00025BE8&ts=17140237140000000&eTag=%2218104660-0000-0500-0000-6629ed220000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1ZeW9BJTJid0RMdTRtUzlDWVJrcDhhVVZKa1l6eGd4b0ElMmIwYkVkTUV2cnB1YyUzZCZSVEMtT2xkUHJvb2ZLZXk9JlJUQy1Qcm9vZktleVRpbWVzdGFtcD0xNzE0MDIzNzA3NzE2Njc5NyZjYmRwYT1UcnVlJmNkcD0mZmdsYz1OQU0mdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCZmdGlkPTkxODgwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZA&environment=2&UserApp=2&UserType=1&UserVersion=16.0.17618.42300&verifySessionExists=True&corrid=e1ba1b69-5284-4806-8873-8e60e402cf02&connectionToken=GR5kp30yiEVXqhzZbzdnjg&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=7 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://excel.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F5+HqgUXIepUgY7m27+VYw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:ovb0Y+pk3Ig=:3n55mL9OCbSmDr5m+5/kPeLXEgWbOoDsANnIzKJ7ibc=:F; xid=7cea90ca-8c0f-4cd0-b0f3-03057d8aa345&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PEU2
X-FrontEnd: RtcNetCoreLB1
X-MachineName: AM1PEPF00025C1A
X-UserHostAddress: 91.90.42.0
X-CorrelationId: e1ba1b69-5284-4806-8873-8e60e402cf02
X-UserSessionId: be2bec47-2a8e-4119-832e-1c387d251086
X-OfficeFE: AM1PEPF00025C1A
X-OfficeVersion: 16.0.17609.41019
X-OfficeCluster: PEU2
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://excel.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
Sec-WebSocket-Accept: FEU9SxxjIjFZ6S6KdzZDxMRG02o=
Connection: Upgrade
Date: Thu, 25 Apr 2024 05:41:53 GMT
13.107.42.12
95.101.10.185
13.69.239.78
20.190.177.148
23.54.9.64
51.116.253.169
52.108.56.17
0.0.0.0