{"report_id":"c2bde95f-256a-4cd3-a759-036103763190","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-10-27T20:37:05Z","url":{"schema":"http","addr":"convoywestcan.ca/app/asessts/ZIRDHJSVMISCLHW/c3RldmVuLnJ1c3NvQGVjbHlwc2VzLmNvbQ==","fqdn":"convoywestcan.ca","domain":"convoywestcan.ca","tld":"ca"},"ip":{"addr":"162.241.163.55","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"title":"Login | Microsoft 365"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T17:25:21Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"browser.events.data.microsoft.com","ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"1991-05-02","domain_rank":290,"first_seen":"2018-05-25 08:23:05","last_seen":"2023-10-27 18:13:54","alert_count":0,"request_count":6,"received_data":3948,"sent_data":4989,"comment":"","tags":null,"fingerprints":null},{"fqdn":"office.com","ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1999-04-20","domain_rank":25,"first_seen":"2014-02-05 21:43:38","last_seen":"2023-10-26 22:34:05","alert_count":0,"request_count":1,"received_data":216701,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"convoywestcan.ca","ip":{"addr":"162.241.163.55","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2013-08-14","domain_rank":0,"first_seen":"2019-04-04 14:44:00","last_seen":"2023-08-20 17:08:57","alert_count":1,"request_count":1,"received_data":396,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.cdn.office.net","ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1994-11-14","domain_rank":1292,"first_seen":"2021-09-30 20:37:19","last_seen":"2023-10-26 23:41:33","alert_count":0,"request_count":34,"received_data":12095265,"sent_data":17284,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.microsoft.com","ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":302,"first_seen":"2012-05-21 06:29:41","last_seen":"2023-10-27 18:12:14","alert_count":0,"request_count":3,"received_data":88079,"sent_data":2018,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img-prod-cms-rt-microsoft-com.akamaized.net","ip":{"addr":"23.36.76.186","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-18","domain_rank":1197,"first_seen":"2017-01-30 06:18:05","last_seen":"2023-10-27 18:16:02","alert_count":0,"request_count":1,"received_data":4623,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mem.gfx.ms","ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2012-09-07","domain_rank":3475,"first_seen":"2015-02-13 16:56:33","last_seen":"2023-10-27 19:04:09","alert_count":0,"request_count":4,"received_data":262671,"sent_data":1941,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getqzkugxihky.proscribe.info","ip":{"addr":"101.99.93.225","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Malaysia","country_code":"MY"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":190,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.office.com","ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1999-04-20","domain_rank":2755,"first_seen":"2014-02-12 02:02:36","last_seen":"2023-10-26 19:28:25","alert_count":0,"request_count":1,"received_data":712518,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wcpstatic.microsoft.com","ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1991-05-02","domain_rank":5007,"first_seen":"2020-09-15 19:02:29","last_seen":"2023-10-27 19:39:00","alert_count":0,"request_count":1,"received_data":82474,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.s-microsoft.com","ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2012-02-07","domain_rank":10166,"first_seen":"2013-11-06 16:56:27","last_seen":"2023-10-27 20:32:10","alert_count":0,"request_count":3,"received_data":98591,"sent_data":1612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.monitor.azure.com","ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-10-25","domain_rank":3838,"first_seen":"2020-04-24 21:32:44","last_seen":"2023-10-27 18:15:32","alert_count":0,"request_count":1,"received_data":91585,"sent_data":480,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"moz-extension","addr":"moz-extension://94b86a3e-a8f5-4509-b451-a3e524e5069f/shims/firebase.js","fqdn":"94b86a3e-a8f5-4509-b451-a3e524e5069f","domain":"94b86a3e-a8f5-4509-b451-a3e524e5069f","tld":"94b86a3e-a8f5-4509-b451-a3e524e5069f"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"32d439c9ec8c789e843ae58b6774681c","sha1":"deb2c661dacf46eb3a1eacbba3e430dcf10cc395","sha256":"f65e83801e16f98e150ae8843afb4c98c0b3ac0fa7fbe5a5ec687b08119732d6","sha512":"a465cd7be378feb36cce002dcf2d8bffb2b3c976a1f222afb1842f395cd027f50d5855ba00baa0b0ae2c519cee87201dce5f98ec80a466858acd4835e150543d","ssdeep":"","tlshash":"8a51c01ab8245bf31b13eab15ffb2112f155b1312131d1a43f2c9a960be715fc1a22be","size":2341,"data":"","first_seen":"2023-05-05T23:38:25Z","last_seen":"2026-04-17T02:10:08.35169Z","times_seen":19399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"939520eada638af9c1ccab3debb8b14b","sha1":"8a3f7d9992e48620c61c58dc1c251dcce524173f","sha256":"57604cc987e25fe54b77b409e487abeb52ccd8f7fbf8bb08d31d98ed977fd6ec","sha512":"4212982022961f884493dc4fe09902c49e01f4fb922608a1da12dbadb4f3bfc4dc80aed325fef79b137a3c445a3402b71fd80aeb4182ab091678228303da5eb5","ssdeep":"768:JmneBhpLkzObU/cOTEShONa7zUVvHCIMDzwzOuVrxYrJr0tBt7F4dZkBgeUfU7aE:DBhrbU0OTEShONylIRTrrlEQT","tlshash":"6f33c45bb355f5310386a0f50a2f010ae232986e64b8503cf3d9dee57cb448a3267fb9","size":53194,"data":"","first_seen":"2023-07-03T01:33:41Z","last_seen":"2026-03-03T19:01:20.906245Z","times_seen":1661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/otel-logger-069110bbb3e233be1960.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2de76a406af33f9a3ae1c6ac499c206e","sha1":"a750cf8a17b662db15a581ed959957193e89a195","sha256":"c36ea1355a70da52de0477740e13e50a58cb061b750e0769bebe0360fcf410d0","sha512":"3a655ad231f307a84cd86a0c4a5874c65cfa2e7b0045d01834592562ad9494c9eee692ad98ad518f526032a9d7f9462a8224d573672d142098ef667f5ff9174a","ssdeep":"1536:H/U34aKCTeF/WttZ6bYTCQrTpUt82vllOVE:EL2Sv6cTNbcld","tlshash":"6193b5cdb2c6f026429770b591bf100bb37e69d6380d8424e619e8d67c7855ea323fad","size":97526,"data":"","first_seen":"2023-10-26T04:13:29Z","last_seen":"2023-11-01T23:44:55Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b11b89e52ce92f2b961047543cc90bf4","sha1":"91c261acf4289323dcaae07da19b58c9b0a48287","sha256":"f9a8f7ef46e4a827bcc6cb877d6e8197f41f1c4dd043cf947270991c89b539bb","sha512":"8bc73f67c66f99affe22dbbdfa0f1661a41fdb2095d3847f0c757b90b0ea64bf17a53818dd2de03f8e041e1e465796416d972637a846e8b8fb73dcf3255d375a","ssdeep":"","tlshash":"20e068ca90d562344145f03c14ab53017333405b32ed6a28bc2cc400bf594155779afc","size":432,"data":"","first_seen":"2023-03-07T01:35:12Z","last_seen":"2026-03-03T19:01:20.909874Z","times_seen":2385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"076152a850225cec36bfebabb3afeb30","sha1":"068ab16cf31f3afe2e8d01e092503cfce3ea03c5","sha256":"a99bef929801c692f48112916af92f0535485d7de35b6329478c2a531c2dfcf7","sha512":"9394e67904393d1467d2500626212b7f71416da8f7efbef18ea971be52fae4fa95e565469fb72c9932b215fa7397715d81d9583e6f7d099430e4a71c53b50f9a","ssdeep":"","tlshash":"69e08cabac910b33568b2c69626ba6483a789483c508e8443d7d15814f7ad8119ab6df","size":310,"data":"","first_seen":"2023-06-14T15:00:47Z","last_seen":"2026-03-03T19:01:20.911353Z","times_seen":1891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d08aa77c255be8e52d47c66e027611a2","sha1":"89974d066ba2e1046988e1b48bce7c4dd516c0d2","sha256":"f79b878a61804f84308329347b2148586ce4a00778ac04a2cf2c1115c380eaf1","sha512":"c4ffc0f136184c8dab0b245783e992299c2977d008fbe69cf9a624bd4503fddf622448439ab90664f150d33534cfee5340e2995608c537c719441334610b0d95","ssdeep":"","tlshash":"a521809770ab283201ebaa76c11ece003035104f26cef9403ddda51b0fa3457f766ba4","size":1143,"data":"","first_seen":"2023-03-09T15:02:49Z","last_seen":"2024-08-21T09:40:10.866743Z","times_seen":1570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/unauth-vendor-d78f09b728.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d78f09b7284ee25c27265b1df43f5395","sha1":"9edcad1de9a5ed59536f78c7bb1fd8a4da81301a","sha256":"e3ad812daf7c81f8cf38fcb6b76761924d24c2fa6af4b7cf40e125d42794ccce","sha512":"5dacd420c78488b27e3bbb64b3f437550203385de47c99ba0f1799315bff4b19fcbb08291e3c30ded9983010ebdfd410fd0a39fcf09dc1d6a523692085d22aea","ssdeep":"1536:ZpBERvy5imPGTaAQMbe7HbxnBBD66dUa9en/BJTlOorjDBRISCIHqB9CcFJZ5Iqy:mCY/BJTlrRRfCIHqCcFNQijHFq","tlshash":"edb32bce75c5b06303a761ba50bf100bf2755d49684d4910f229e8eabd7ca8a8237f7d","size":109380,"data":"","first_seen":"2023-03-09T07:56:56Z","last_seen":"2026-03-29T08:59:47.872161Z","times_seen":3044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js","fqdn":"wcpstatic.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f524e20ce61f542125454baf867c47b","sha1":"7e9834fd30dcfd27532ce79165344a438c31d78b","sha256":"c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9","sha512":"224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2","ssdeep":"6144:dIcsZZWWI0BDqL9W4sC6Hdo7NjIZjIZP0hZRWLF9LmSF/EI:dIcsZtI0BGoHdo7NjIZjIZP0vC75F/x","tlshash":"98546d7fe3c420ad03012346b885bb39ba1d067d7691d6c5f84ca57d23c2b95c52abfa","size":279220,"data":"","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-04-17T01:28:09.206444Z","times_seen":9653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/meversion?partner=office\u0026market=en-us\u0026uhf=1","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d4e8b0f7460871f054e91458b140e89","sha1":"20ea295d5b00e6a3612f8f7610e1b818080cd2f4","sha256":"d4eea8395d57d96a30bac43176681506d2c0d5ae0bf5272c67199853cd1fec52","sha512":"4b5d710a86bea633420b62d337b44f8f18738b55c0668d225771d6693046bf919f7e6a295aef950fecb04634b58bb8206a8d7b97155924b535a735880c65e976","ssdeep":"768:z2M2k07M0FdKF4XrA952MYIVFZ6nlqMy6aAw6Rz1yg:zDh075rKt52DIVFZTP6aAw6R5yg","tlshash":"76d2f88a76c0b17582633178a67f650ff3366aa1744d8518e44afcda7cbc80da123f9d","size":30197,"data":"","first_seen":"2023-10-14T05:16:57Z","last_seen":"2024-08-21T04:46:21.994076Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/scripts/me/MeControl/10.23271.5/en-US/meBoot.min.js","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9839b66d7c986a67a821e7b3783bdf69","sha1":"4f356c1a92358156486ee50921fe4c728f6d0eac","sha256":"fa334c1e3766c50298f83ee32aed20fcd0978230350837dc7cb9115d096a7167","sha512":"aca1ce5c4821d38c3833abf0dc82493a3e0444b58d70b5b2e756cf94744823ee243eee50e36637af28e04a4d0b5bdaf318af38df0925152f062add7e6c6735c3","ssdeep":"3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQf+SB7qSASyntnh:2smT+X+NLJar+S9qSASyntnh","tlshash":"0c04f8d96241f03a4b42ac10b73f091aa13bacb575c8c348f5a9f8dd68bb945943ff64","size":181223,"data":"","first_seen":"2023-04-05T02:11:24Z","last_seen":"2024-08-21T09:40:10.862415Z","times_seen":2189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js","fqdn":"js.monitor.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c6e1a3cd82e81abab9d7abc397a107d","sha1":"246f870580dcdace936284daa47a08e7e54355cf","sha256":"077052944d805da1cd832b70df86d282be6a1309626c646fc36dacdc9fbc7ddb","sha512":"7862666c1dbc51b181a03cef28b46da008cd1aa4a8f852daa780a596246d4af0f5398f5d062de6afd83841a286b8d3a1e283e0248ce7f7f5de6f9199a7413e01","ssdeep":"1536:alpxflyayPSKPCyxc6hJdHdK6k5tC1irbZ9rHgcw9l:alpxflyafxx6hJpIT3AF","tlshash":"7b93e7cd75c2f066436b7075903f200fa33f5995284c8954e229e4da7cb946ea367fac","size":90648,"data":"","first_seen":"2023-05-20T15:05:46Z","last_seen":"2025-08-18T18:58:50.565337Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://94b86a3e-a8f5-4509-b451-a3e524e5069f/injections/js/bug1731825-office365-email-handling-prompt-autohide.js","fqdn":"94b86a3e-a8f5-4509-b451-a3e524e5069f","domain":"94b86a3e-a8f5-4509-b451-a3e524e5069f","tld":"94b86a3e-a8f5-4509-b451-a3e524e5069f"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"7c873167b5d35fd9f6690071701d4669","sha1":"f897afe9818a00a80e98bdbc67e7f67343f89378","sha256":"014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a","sha512":"85f4b41add3c875f2d15feb5d8684c371dd19839e8c711f8570dc0eeab82faf5374373d350d82f3c0dc62316db450ed3e67c0b01537f6081846b8cc777090994","ssdeep":"","tlshash":"3511e28fb45362a3141106fd2b5f5455d1ff75257338d181364a859837a110f83b64d9","size":995,"data":"","first_seen":"2023-04-11T22:15:44Z","last_seen":"2026-04-17T03:01:20.004809Z","times_seen":66171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8e885caefacbf60678f0db4c652394e","sha1":"295611eaf70cf90c97f85229f4c25f29a9714b03","sha256":"406c5b884038a7191811a37f9dac0bf7765c30d3abf5d4639a8e539150064634","sha512":"6d237a261e35dcc17d307a62766582022db1a8e3b5391f37b909883d8c3d570ad9d6fc72519d3e3da1370945f4928d0d1c6211b3d78083e90e85f0b0a5451cb4","ssdeep":"","tlshash":"42318b8a3077157215ebea7b825e6a053032000f05cad8003d9cb60a1fb2da3bb67bc8","size":1474,"data":"","first_seen":"2023-03-09T15:02:49Z","last_seen":"2024-08-21T09:40:10.867653Z","times_seen":1570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e563a7264ebbabd141a81891310310d","sha1":"ae12f36227010f2a3d895cc16ab6b5713d68feac","sha256":"f02fc92e3f8bfef6811100960e8e8185b97dce64d1f1fd5645a11bde7b13ca27","sha512":"18c1291703f752a53a51c2d1ff6484c2e8407940f9c052acee75222c74f2457d65166d8f04d808aea8a0e56fc3e2b9bb64fb6424269b76c9487666b158f40a15","ssdeep":"","tlshash":"73318b893077157215abea7b925e6a053032000f09cad8003d9cb60a1fb2da3bb67bd8","size":1467,"data":"","first_seen":"2023-03-09T15:02:49Z","last_seen":"2024-08-21T09:40:10.869221Z","times_seen":1570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b6bf4770070e8b899f749a496232d64","sha1":"aecdcebb395c66118941a07268c91d8e10716f0a","sha256":"8f3f6bd6db20cb2898af9fa2cf8fbaf399fdca0da253bc88cfff82b98a5a236f","sha512":"3722eb45ac20a0b5b98029fa0779be11c1c8529730a42b5aeb93edd3b4b167f58dd197539da2881064f7733bf3024f5528848e17393845ceef1de6020632d63b","ssdeep":"192:Hs4mbigyZiKlijyBiTrigypiytijyBibXCigyXZiWdiijy/Zi9WZjfzp/CnDtsK+:HQbibiKliUiTriTiytiUibyi3iWciciC","tlshash":"2502dc5923d608bad06730292faf8581b87084678d0aed447d2cd6d18ff5d7219f8bf6","size":8669,"data":"","first_seen":"2023-08-03T11:32:21Z","last_seen":"2026-03-03T19:01:20.915238Z","times_seen":2325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20cf97cab90428eb751f1947d78005b2","sha1":"1578f01e99c2319c3b77ae5ac1c7352bc0e41688","sha256":"fdc67c0700776d8babc9a5d04719c4b9175d12b122b04fac69ce876a060e6cbf","sha512":"c831c70e7f3880edc8048894fd889083d650629f5a152684edf7f787ea1c5476a515ad9e20879e99eb52f2f21a37a2594834d0943772b7c324f1cb9fdc5303e1","ssdeep":"","tlshash":"b10178683ceae0dd4010215d9babc10064713d13394bcc7db3edaa390f02612fe574ab","size":669,"data":"","first_seen":"2023-06-28T05:47:32Z","last_seen":"2025-07-10T23:40:19.07225Z","times_seen":4115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87461c8bb9840c47cb00446eaa160e09","sha1":"4130089371fcd1c404fc3df7543e60057dafb176","sha256":"78099757a62fac0dff6793c6b6ebec6116fdd7b660e248003102dd921de09783","sha512":"b010f3e6faacc1cd33f1b55e4a8a9db1892cbf4dec26f02a3db1a56f27889f8309dce6a1397cb46b4a790d6aa7419308ec08202a5800d1b73b1f9e02b57fbdd9","ssdeep":"192:EOcnbGz1+F5pS3H0yuLvcXj4aoPM7jSyi:iby3HXj49","tlshash":"d9927735bf3b346ba7232625876f95016a7110670481d8babd4df1884fe40ca72f6ae6","size":19693,"data":"","first_seen":"2023-10-19T04:48:52Z","last_seen":"2024-08-21T04:09:25.017495Z","times_seen":924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/8e-e88b64/82-2a4f02/49-a00ab0/92-02e55d/7c-dcea75/75-fca72d/ed-e77ee7/d5-bf34c0/a9-078595/7a-7ea8cc/2d-40bdad/23-e8cd2b/96-eb5423/e6-6b0cce/d1-98d78a/c6-082272/a7-f7a340/1e-addbef/2e-ca165a/fc-169dd8/8e-60935c/87-fecbed/96-6ed6eb/c3-eb62e0/ad-ffd6bf/35-621acc/5b-6eff60/b0-07f293/1e-9d9d16/52-f0367f/af-abd754/bf-517249/e1-ed258e/20-0b10e2/6b-0f1117/fb-5e9831/a2-598841?ver=2.0\u0026_cf=20210618\u0026iife=1","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a9b16e1a3ce074d6cab7b6844d49fad","sha1":"98db09786ab9b960ee250adabb301383566f4c1c","sha256":"d794f9bd321156a2a2bb02102ad0bdc09bdc8dedf71ec42683fa53c3725fdd72","sha512":"71a5cbb0b5c11ec80fe0d3ad751c3e7dd0b1fadf641f8c51a8c617048b6ccd80993018dca2e4eac28a2246725c326634eab165d6f3e9eb531aedc3f18fa8ba9a","ssdeep":"3072:1f4HuF7pxnISP0J9d1EwgXA7nKRZMK/7b/:1f4Hu1IgKcb/","tlshash":"f2d33ba9b158357a8bdf90fc978f1409b3330429944a6058b86cdded1874e4e21b7ff9","size":137850,"data":"","first_seen":"2023-06-28T05:47:32Z","last_seen":"2024-09-19T21:45:34.818956Z","times_seen":1768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/scripts/me/MeControl/10.23271.5/en-US/meCore.min.js","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fe3dd83a0d98bc1977f57ea33c37693","sha1":"8df606f40e4cc8c07ce929d5a82fd5304eaf4eb7","sha256":"a5268a183f2a091d2d17773997e89a25fc45cbd60e586edf61f544fb85d6f6a8","sha512":"b81c2eb3bfa8ecf1ffcbb24e4a776cd2b083460a0ac53213eaf48997ac27bb20f49ceff3a098aeba33b3ad4f74ca86b5018afe6689a260f011df4249029ce78b","ssdeep":"3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ","tlshash":"43a3549d5e01a73775a70d9a31fac66e127fe13894c4e786fab5987c028cb91e013b43","size":100769,"data":"","first_seen":"2023-03-13T21:04:48Z","last_seen":"2026-04-16T23:09:33.431968Z","times_seen":6295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"681050a0f9db821e8b758d5256d00ffd","sha1":"ccf58fbbc952747bc6ea85417ff2460cffe552f9","sha256":"411eb9db07e847e829088b95dfbe8aa97e08040383399531ffe7661c68a8a0ca","sha512":"08db9040cdf17dca22aa1aa84472447ca66adf12d7ce3cb9f4f97af678887a3fea7e488e806e91ff86b84a6d291e90b71264da0105b776519fc0efd3da8aa893","ssdeep":"96:zzWPsATJri2rImulCDsH872T/tD4GbiCkLAnSyiS503:zzWT5i2rbulCDs872T/14G2CkESyiS50","tlshash":"82a1219e74ea1131527b707c8fafa3547632e4634488fd31bd4ca6016f69063a1eabd4","size":4680,"data":"","first_seen":"2023-04-14T02:42:07Z","last_seen":"2024-08-21T09:40:10.874027Z","times_seen":1607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/unauth-874e057007.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"874e057007636f96d186f3ff1ac6e298","sha1":"2df8b664c7671311f701f4a36823c9c319ba907f","sha256":"0077c4be96711e5a136318c4928e14ae40b6d07b95c52d3fb952b71cee8bc8f3","sha512":"9acc92a0fb95c3bc61b26cad745fa4c3857a412a5f21b4290d5dd4dce423e48b6712442c0393b99fc51d4a96381a25fc135ca07e5db0b735b404033f801d4873","ssdeep":"3072:U6Jx9er2j16l32ApNyksnN2993dy72AZ8TAeNVQG:dJLhhOyNnNYW2A2TAefQG","tlshash":"c3e329ddb1c1b46243a360b5507f200fb33f6aa9684d8454f11ae4d93cb896e63a3f6d","size":149192,"data":"","first_seen":"2023-04-14T02:42:07Z","last_seen":"2026-03-03T19:01:20.898392Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aac3eb24b04b904bb2bcafc9466203e8","sha1":"583a20717a85173ba6d97d12d21f3d8409ddff18","sha256":"3d63074920a11618c67f3fef79c7e6d9fe6bfadbaec6cc358d0327d3288bf1c9","sha512":"2ca0b3bd3a20b44b5bac6b0352b8dae823c0509b293a40526678c795f0775a75a97177935d3ff5e2de8a5ef64455342659ea7b5d87b095b73773ab5774c46fdd","ssdeep":"","tlshash":"cab012e1db1140d62501900043a440081f6a61bf4500c90dbf7c18423f01f4708451e4","size":101,"data":"","first_seen":"2023-03-07T01:35:12Z","last_seen":"2026-03-03T19:01:20.919133Z","times_seen":2445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f37b7b223d96de4bd256bb9eb62185e1","sha1":"33bd61d33c26cbbc0181eab416aa5710a58bf6e2","sha256":"8b2b564f560312d43a2d7eddc02adf7d83c02e12a2e95a716aae02a27327c38e","sha512":"a6abbc71f0c1d3631de1d524ce0c4ae222f8c4e39141ca8d5b52e1474d9c096541b5ac9cd54eee08cd976b9a4ed1dd345081ceffb9c1d611e4b120bb40018cb3","ssdeep":"","tlshash":"e741170995e35127257b347e6b6bb20861328517240cde01fc4de701bfe4a2797aebda","size":2399,"data":"","first_seen":"2023-03-07T16:58:35Z","last_seen":"2024-08-21T09:40:10.875436Z","times_seen":1638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"convoywestcan.ca/app/asessts/ZIRDHJSVMISCLHW/c3RldmVuLnJ1c3NvQGVjbHlwc2VzLmNvbQ==","fqdn":"convoywestcan.ca","domain":"convoywestcan.ca","tld":"ca"},"ip":{"addr":"162.241.163.55","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-27T20:36:46.164857858Z","timestamp":1698439006164,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /app/asessts/ZIRDHJSVMISCLHW/c3RldmVuLnJ1c3NvQGVjbHlwc2VzLmNvbQ== HTTP/1.1\r\nHost: convoywestcan.ca\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Oct 2023 20:36:41 GMT\r\nserver: nginx/1.21.6\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nrefresh: 0;url=https://getqzkugxihky.proscribe.info/?u=steven.russo@eclypses.com\r\ncache-control: max-age=7200\r\nexpires: Fri, 27 Oct 2023 22:36:45 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-newfold-cache-level: 2\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T03:13:33.193802Z","times_seen":13844586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"getqzkugxihky.proscribe.info/?u=steven.russo@eclypses.com","fqdn":"getqzkugxihky.proscribe.info","domain":"eclypses.com","tld":"info"},"ip":{"addr":"101.99.93.225","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Malaysia","country_code":"MY"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-27T20:36:46.454Z","timestamp":1698439006454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proscribe.info","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Oct 2023 14:20:09 GMT","end":"Thu, 25 Jan 2024 14:20:08 GMT"},"fingerprint":{"sha1":"ED:28:7D:DB:EE:A0:E9:8C:A0:FF:56:96:BF:0D:5F:AD:FC:FF:AC:E5","sha256":"A2:D5:02:5B:BB:64:4C:13:34:99:4D:AD:F5:93:39:FA:8B:89:DF:0C:D3:86:70:E9:98:43:86:90:12:4A:07:04"}}},"request":{"raw":"GET /?u=steven.russo@eclypses.com HTTP/1.1\r\nHost: getqzkugxihky.proscribe.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 27 Oct 2023 20:36:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://office.com\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T03:13:33.193802Z","times_seen":13844586,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":123,"dns":1,"connect":53,"send":0,"wait":168,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/sharedfontstyles-27fa2598d8.css","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.234Z","timestamp":1698439007234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/sharedfontstyles-27fa2598d8.css HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Oct 2021 21:10:14 GMT\r\nx-ms-request-id: 8ccb6e8f-901e-006c-746d-701400000000\r\ncontent-encoding: gzip\r\ncontent-length: 267\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c24\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1327), with no line terminators","md5":"27fa2598d8d08e131197bec2c3786643","sha1":"041c8af3812efbc3baf777e83f6cad15557eaeab","sha256":"c8ad9c22eb148de817a1b86bcfc7ccef2151f798c0d8f26a7534ee0b9465ea34","sha512":"bc69b32f39c8988ccbdb759201dadde317de84aa9b3f1b401bdd919dd3d1b0c6df58028cfa83ac9f1d297a507050ecc166a9195aeba8fa33aad8558eb21ba2b0","ssdeep":"","tlshash":"6021d68e068b112ff01a3f9266ede7026f636217552a853a103cbd186ea950d06c5f3d","first_seen":"2023-04-05T04:14:48Z","last_seen":"2023-12-15T16:35:27Z","times_seen":1460,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/versionless/webfonts/segoeui_light.woff2","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.239Z","timestamp":1698439007239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/versionless/webfonts/segoeui_light.woff2 HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Wed, 01 Sep 2021 01:22:49 GMT\r\nx-ms-request-id: 3691f8c2-401e-000d-42dc-6f3743000000\r\ncontent-encoding: gzip\r\ncontent-length: 10567\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c23\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10567,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 10544, version 1.0\\012- data","md5":"8e160632c48ad1e3d0e9f4334636086b","sha1":"7ba2921499b2264dee14f95801bfbcf416861d7c","sha256":"57febfbad63b722a38bc668e67bc7c2dc02eca221f26db3a9303c1bd584a1a42","sha512":"943e0bab3a26aa73ab7f45636dce32f435bc6651d3fe9f94dc8ee37ff2291a191a9f9276603c3b760eb734388c2388f06a8331fadf85025cb92687d3e86d24de","ssdeep":"192:zdZObGyIhlCLlNHSmMalbqw/37PfF1pLNdEVSVJbb/3yw142gIn:RZO6yUUzHSmH1qwzXvxNSsLD3yMgI","tlshash":"4322b017c370a0f0d8854a70d0f0c6f52366e86ba5598605bc17f9bacb80ddc694f93d","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-04-16T08:21:28.640876Z","times_seen":3067,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":52,"dns":3,"connect":4,"send":0,"wait":28,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-2-a65339870b.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.348Z","timestamp":1698439007348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-edu-2-a65339870b.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 81973\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: 3992a5ae-901e-0053-70fe-83dca3000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c43\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced\\012- data","md5":"a65339870bf74e66812e7eb4ae2e2ad0","sha1":"1c69ab833c818b3b0bf97100121c7627a423a110","sha256":"6d6f78635fdf119415ac27b93cbc42580bea55aa4a031c227a911e3bd2766075","sha512":"a2679e9ddb1044b7c064bfaf1738bcc7aded42d7ecb8b0054a1881fedf753c0a1834305a91ec18cb27c7bb5ba76111bc52db8679f013419db0e7fc32f930442a","ssdeep":"1536:2vvsxStT3uigHB3mNzK2DlRYFj1Ho0/TgMqIBVJmxD2mo:yAi+B34zp8FpHo0/T1BID2L","tlshash":"bc8302b2a811cc9e3acd641cd2e76187cf3e76afd7623e38426950c225e95826d47c7c","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.61969Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-3-f237dbff1f.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.350Z","timestamp":1698439007350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-edu-3-f237dbff1f.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 153748\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: 0c54ff78-001e-0051-5ed5-83621b000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c47\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 535, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f237dbff1fa2d11d1b732696f88fb568","sha1":"ccbb89ec75d9b76fa6f2bfcfe2103bc2ac34f33a","sha256":"27e3a326be87a13cf13472fcb4bced5572d73d7cb34a0e9a7e03b6512eff4e6d","sha512":"886ac3cfef87c0bd936a8a2042f40712713e1e6fa0e39fb7c52e584d032399387883a8a1901b703476a2b3b4f44ec5987977778d681aeb9d902122272fdb7793","ssdeep":"3072:ti4QJx32obS2yh0nrnXko+XkX+JILt91NmCcgp+rQ9JroG:zOx324RrnXko+XYcgdcgp+kzoG","tlshash":"8de312d9db619cda05b8d91da3fda06d66c8792b1f530bf7907380af38a5208d312179","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.627314Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/unauth-vendor-d78f09b728.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.361Z","timestamp":1698439007361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/unauth-vendor-d78f09b728.js HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 Dec 2022 23:23:45 GMT\r\nx-ms-request-id: b5b70127-e01e-0004-2b40-097290000000\r\ncontent-encoding: gzip\r\ncontent-length: 35693\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c99\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35693,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (31996)","md5":"d78f09b7284ee25c27265b1df43f5395","sha1":"9edcad1de9a5ed59536f78c7bb1fd8a4da81301a","sha256":"e3ad812daf7c81f8cf38fcb6b76761924d24c2fa6af4b7cf40e125d42794ccce","sha512":"5dacd420c78488b27e3bbb64b3f437550203385de47c99ba0f1799315bff4b19fcbb08291e3c30ded9983010ebdfd410fd0a39fcf09dc1d6a523692085d22aea","ssdeep":"1536:ZpBERvy5imPGTaAQMbe7HbxnBBD66dUa9en/BJTlOorjDBRISCIHqB9CcFJZ5Iqy:mCY/BJTlrRRfCIHqCcFNQijHFq","tlshash":"edb32bce75c5b06303a761ba50bf100bf2755d49684d4910f229e8eabd7ca8a8237f7d","first_seen":"2023-03-09T07:56:56Z","last_seen":"2026-03-29T08:59:47.872161Z","times_seen":3044,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-4-b91aa86d96.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.354Z","timestamp":1698439007354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-edu-4-b91aa86d96.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 204169\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:00 GMT\r\nx-ms-request-id: 823e9241-601e-0047-340d-7594cc000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c49\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":204169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced\\012- data","md5":"b91aa86d96c46c4d61f2b244abaf89c2","sha1":"1c725ea7a4ea7b4a958b4bc05b24f850479b11b2","sha256":"d14d8babd12bad6a5ea601e537d7fbef8642c86a0db3751ac93e7aff892dfa83","sha512":"180b7ac7b07b9b137eb5a9eb9df53a41bd6bfd8e9350ce0bcfa95ae97151e9c4a5f2215a8513ae7065cd06d0e95e8347eddce11d4c8556135d56e2ba1839b9fa","ssdeep":"6144:GLEtQhqwIiIwuovyNmUu6NsRIUiEfHlpZgMgyG7JOv:wEyQiIlovImUNsRlvfFpZJg97J+","tlshash":"f214230f9d394f1c3bbd4eaee2352eaadc2e67963dc2ded85205544323db924128d2c0","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.582569Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/versionless/webfonts/segoeui_regular.woff2","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.241Z","timestamp":1698439007241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/versionless/webfonts/segoeui_regular.woff2 HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Wed, 01 Sep 2021 01:21:15 GMT\r\nx-ms-request-id: 904e0908-001e-0041-371e-85a773000000\r\ncontent-encoding: gzip\r\ncontent-length: 11123\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85ca4\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11123,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 11100, version 1.0\\012- data","md5":"906ba74c1f7a4fd42174e0f58fad3c95","sha1":"3631818302580f0e0da3ed54e8488ce72b1d4b11","sha256":"bb232fd09a6696ce21ec10a43b89933e12ad866dfde30a4a6a08e08082e6557d","sha512":"287e1f5eb314302ed3d78d17516d9105deaf5ae325c3cdaa1298bab455c187022b53643a88bb9a64074707a1e19392b12f7bcac6601eb0fde66dbe7fb19c2e6d","ssdeep":"192:uW6VIH/eJH8zI33ipXWVgfDPbyVvDUOSkWJxRhCaev7eZYxrPEsDtPM95E:UVIHmV8XXcgfDVJkgwaev7LP3pPM95E","tlshash":"ff32bfcd6a10cd39bf6edba83097d1c4e928e2248b5423a214781feb86b086c5516e34","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-04-16T08:21:28.654535Z","times_seen":3077,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":81,"dns":1,"connect":3,"send":0,"wait":67,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.363Z","timestamp":1698439007363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/sharedscripts-939520eada.js HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 29 Jun 2023 22:42:44 GMT\r\nx-ms-request-id: a7df2342-901e-0043-39ec-ab19cb000000\r\ncontent-encoding: gzip\r\ncontent-length: 15218\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85cbb\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15218,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (31932)","md5":"939520eada638af9c1ccab3debb8b14b","sha1":"8a3f7d9992e48620c61c58dc1c251dcce524173f","sha256":"57604cc987e25fe54b77b409e487abeb52ccd8f7fbf8bb08d31d98ed977fd6ec","sha512":"4212982022961f884493dc4fe09902c49e01f4fb922608a1da12dbadb4f3bfc4dc80aed325fef79b137a3c445a3402b71fd80aeb4182ab091678228303da5eb5","ssdeep":"768:JmneBhpLkzObU/cOTEShONa7zUVvHCIMDzwzOuVrxYrJr0tBt7F4dZkBgeUfU7aE:DBhrbU0OTEShONylIRTrrlEQT","tlshash":"6f33c45bb355f5310386a0f50a2f010ae232986e64b8503cf3d9dee57cb448a3267fb9","first_seen":"2023-07-03T01:33:41Z","last_seen":"2026-03-03T19:01:20.906245Z","times_seen":1661,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/store-buttons-747d2c674f.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.358Z","timestamp":1698439007358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/store-buttons-747d2c674f.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 7115\r\ncontent-type: image/png\r\nlast-modified: Thu, 31 Mar 2022 20:09:34 GMT\r\nx-ms-request-id: c0c5abda-401e-0032-5415-84ffe0000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c8f\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced\\012- data","md5":"747d2c674f731edfd2779d83c8532e24","sha1":"c40a635c160d4ca763d8c86f560cb937a8e1090b","sha256":"ca13c3e1ec9b3484f3e6af002f127c03de8e5171e76d37a5749a3cd75d098b05","sha512":"ed821eab2956895a140c55ae7f79668f8dbb55d54408251aded0c57200d8ad04e40dff95eeba79d6d149fdf82fe77f21eeebb235ee7bc12c84a6ff0dd3cb6691","ssdeep":"192:ESBW7OKnwRKKrPq0lxbF4vMU7YzO1gR3C2Wl2:DY7PSrLprUEF3CH2","tlshash":"ece1afa8c3a03b798a68f8f3e59cbc3323cf049f47197d1865bd283c2485d58a9495d6","first_seen":"2023-04-18T11:30:36Z","last_seen":"2026-01-29T20:12:27.582692Z","times_seen":2829,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/qr-code-2be9b68eed.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.359Z","timestamp":1698439007359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/qr-code-2be9b68eed.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 3974\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Mar 2022 21:09:02 GMT\r\nx-ms-request-id: 39a96629-801e-0002-690d-75412f000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c93\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced\\012- data","md5":"2be9b68eed69ae75fba5ed982d0ff25d","sha1":"bd6e134c0d87c52ac751555269a59796d5eabc55","sha256":"8281e85e9ff70034913a38d9eaa6af52ed98ab621300f0558e70a9bceff7246e","sha512":"d72e1c8f52d65bbfe2ecdaf9e7a0c209f4f7c385b470dab7c0979d3d5f1ff29ec14a5e92334676f560dfd22924b0fb983f43fb936ea23f812ed0c639896f8c60","ssdeep":"","tlshash":"3a817be1577f788c016cb4e7c573002e1e3aaac4e86ad581bab336743393968b356d10","first_seen":"2023-04-18T11:30:36Z","last_seen":"2026-01-29T20:12:27.566804Z","times_seen":2828,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/79-4cdd0a/33-ae3d41/a5-4bf7a2/13-8e1ceb/81-32f0c0/5c-b7b685/92-14707b/74-888e54?ver=2.0\u0026_cf=20210618","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.251Z","timestamp":1698439007251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/79-4cdd0a/33-ae3d41/a5-4bf7a2/13-8e1ceb/81-32f0c0/5c-b7b685/92-14707b/74-888e54?ver=2.0\u0026_cf=20210618 HTTP/1.1\r\nHost: www.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 20 Oct 2023 00:04:17 GMT\r\nx-activity-id: 07f18ead-11be-40f7-a6a2-ff2a0df1a75c\r\nx-appversion: 1.0.8658.39781\r\nx-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-09-16T06:06:02.0000000Z}\r\nms-operation-id: 3088719dc3108f4983fc3190b4128814\r\np3p: CP=\"CAO CONi OTR OUR DEM ONL\"\r\nx-content-type-options: nosniff\r\nx-s1: 2023-10-20T00:04:17\r\nx-s2: 2023-10-20T00:04:17\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncontent-length: 22738\r\ncache-control: public, max-age=30857227\r\nexpires: Sat, 19 Oct 2024 00:03:53 GMT\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\ntls_version: tls1.3\r\nstrict-transport-security: max-age=31536000\r\nms-cv: CASMicrosoftCV4236c537.0\r\nms-cv-esi: CASMicrosoftCV4236c537.0\r\nx-rtag: RT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22738,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64241)","md5":"21d2e4bc29cc9ba690164f896a04c2f3","sha1":"b07f66e6b50916d4a636c2e91f633ac8f63e5b5d","sha256":"47e77d470102641070b066a5a73c34dbd14989f55a3d435efae0fdeaaff3ae6d","sha512":"8432b3b49c14ce2b2787c99f6b5c9d88cf147eb1308b13e01655b39b3677aff4010ec8549ab5100d31391df88a347c58e3b0f22211a48531f418b022b8f9ea11","ssdeep":"3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxx:jlZAW9kJeq8","tlshash":"56f395f2a4b02cb9127b855bbc82623cbb3cf196d55338f6f785a1846ec1445e2db346","first_seen":"2023-06-28T05:47:32Z","last_seen":"2024-08-21T09:42:18.9714Z","times_seen":2303,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":4,"connect":4,"send":0,"wait":29,"receive":3,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/mobile-app-4dc990c23b.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.360Z","timestamp":1698439007360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/mobile-app-4dc990c23b.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 25980\r\ncontent-type: image/png\r\nlast-modified: Thu, 31 Mar 2022 20:09:35 GMT\r\nx-ms-request-id: ceb7fa9d-001e-000c-59e8-83689f000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c95\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 330, 8-bit/color RGBA, non-interlaced\\012- data","md5":"4dc990c23b32e7d0778652ac5cf350be","sha1":"8e33fe3b92bf60c3af9ca69e90493629c287b014","sha256":"29b5c8aae191966fe88ec0a05553e11d3c55466128bd733b919e1f8aaaed18e4","sha512":"8941b83ee89f2a8aa74a6d0abf9baf4e3dd4eaa7a53d7b89e1304e466eaeeb4152de83458696749cbb8ce3f8f95e8648c6334986f848538c166a94ae18b20334","ssdeep":"384:AiMBQUqhRIAmSvxRvbMNg8iYLe/Ex5T0a3iiic2MUADu8neAsnFrkcp16OBkYu:IBDDIxOhpx5TQMDU3KwFmYu","tlshash":"b9c2d0d329eb58fb2821c5ee09c24f4604e7ad443d5d62fcb3d943301458bda7b269b6","first_seen":"2023-04-18T11:30:36Z","last_seen":"2023-12-15T16:35:27Z","times_seen":1460,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/8e-e88b64/82-2a4f02/49-a00ab0/92-02e55d/7c-dcea75/75-fca72d/ed-e77ee7/d5-bf34c0/a9-078595/7a-7ea8cc/2d-40bdad/23-e8cd2b/96-eb5423/e6-6b0cce/d1-98d78a/c6-082272/a7-f7a340/1e-addbef/2e-ca165a/fc-169dd8/8e-60935c/87-fecbed/96-6ed6eb/c3-eb62e0/ad-ffd6bf/35-621acc/5b-6eff60/b0-07f293/1e-9d9d16/52-f0367f/af-abd754/bf-517249/e1-ed258e/20-0b10e2/6b-0f1117/fb-5e9831/a2-598841?ver=2.0\u0026_cf=20210618\u0026iife=1","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.543Z","timestamp":1698439007543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/8e-e88b64/82-2a4f02/49-a00ab0/92-02e55d/7c-dcea75/75-fca72d/ed-e77ee7/d5-bf34c0/a9-078595/7a-7ea8cc/2d-40bdad/23-e8cd2b/96-eb5423/e6-6b0cce/d1-98d78a/c6-082272/a7-f7a340/1e-addbef/2e-ca165a/fc-169dd8/8e-60935c/87-fecbed/96-6ed6eb/c3-eb62e0/ad-ffd6bf/35-621acc/5b-6eff60/b0-07f293/1e-9d9d16/52-f0367f/af-abd754/bf-517249/e1-ed258e/20-0b10e2/6b-0f1117/fb-5e9831/a2-598841?ver=2.0\u0026_cf=20210618\u0026iife=1 HTTP/1.1\r\nHost: www.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 20 Oct 2023 00:04:14 GMT\r\nx-activity-id: 2666d19a-d534-4118-8843-1c63e842c9c6\r\nx-appversion: 1.0.8658.39781\r\nx-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-09-16T06:06:02.0000000Z}\r\nms-operation-id: 7a697270640e8c48b317cdafc04d5bdf\r\np3p: CP=\"CAO CONi OTR OUR DEM ONL\"\r\nx-content-type-options: nosniff\r\nx-s1: 2023-10-20T00:04:14\r\nx-s2: 2023-10-20T00:04:14\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncontent-length: 36044\r\ncache-control: public, max-age=30857251\r\nexpires: Sat, 19 Oct 2024 00:04:17 GMT\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\ntls_version: tls1.3\r\nstrict-transport-security: max-age=31536000\r\nms-cv: CASMicrosoftCV4236c53b.0\r\nms-cv-esi: CASMicrosoftCV4236c53b.0\r\nx-rtag: RT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36044,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (42133)","md5":"1a9b16e1a3ce074d6cab7b6844d49fad","sha1":"98db09786ab9b960ee250adabb301383566f4c1c","sha256":"d794f9bd321156a2a2bb02102ad0bdc09bdc8dedf71ec42683fa53c3725fdd72","sha512":"71a5cbb0b5c11ec80fe0d3ad751c3e7dd0b1fadf641f8c51a8c617048b6ccd80993018dca2e4eac28a2246725c326634eab165d6f3e9eb531aedc3f18fa8ba9a","ssdeep":"3072:1f4HuF7pxnISP0J9d1EwgXA7nKRZMK/7b/:1f4Hu1IgKcb/","tlshash":"f2d33ba9b158357a8bdf90fc978f1409b3330429944a6058b86cdded1874e4e21b7ff9","first_seen":"2023-06-28T05:47:32Z","last_seen":"2024-09-19T21:45:34.818956Z","times_seen":1768,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/versionless/webfonts/segoeui_semibold.woff2","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:50.399Z","timestamp":1698439010399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/versionless/webfonts/segoeui_semibold.woff2 HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Wed, 01 Sep 2021 01:24:24 GMT\r\nx-ms-request-id: c44c0a88-001e-000c-24cd-46689f000000\r\ncontent-encoding: gzip\r\ncontent-length: 11379\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85ce1\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11379,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 11356, version 1.0\\012- data","md5":"dac73dc7b1eb35cd360da41648de072b","sha1":"da1f6a5f46b72320a55b398f5f66d5e9aa6132f1","sha256":"2cd3ef7b5b677b7827bfbe5b926a283e7ca687ddb6b021fa4289630671ebd061","sha512":"366155ff687c7892aabd45c875f6d9d695afdc247b807b18094c18abd4bf6e415e9c78ce2ede4076c378e659c51b1050c10323572e728b6e179f8ed1cd4a6057","ssdeep":"192:bkChSYgOv8Dxgh8lDxlYOT9hNP84LmuuDm3TyRKySHvJWcUihSCtv46A4oNr8oYe:hM8kzlVlz5X08muW2TykySHBAeU4SnYe","tlshash":"6f32bfe963946d2afa3009358295b6dc260d83f0a7c5fc96018e4417d1acffb62caed0","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-03-03T19:01:20.902669Z","times_seen":2402,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-edu-b1e5c7e0c9.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.357Z","timestamp":1698439007357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/more-apps-edu-b1e5c7e0c9.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 759285\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Feb 2022 22:01:24 GMT\r\nx-ms-request-id: a867c235-d01e-000f-6620-8489fb000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85c8e\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":759285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced\\012- data","md5":"b1e5c7e0c9aff86e324cb1704c560fad","sha1":"5abc3016d14ad3c355763847ad5abd13de1dcf12","sha256":"df3103edb09b0c0b9b59508c6eadd84b458f175ce210adefea57f8d83c1d5c63","sha512":"c94988d552371c2751a96d22a8ab846168fdbd5ecd574824f297c71f03309d5920828d420d329a4128aa866cd88dd9a32c94043ac37d1844aeab0e11c56c2f2a","ssdeep":"12288:OYmdARPsjgY0IYigD24q5wzDLkz9P5qV3vnvDpg62VyQDH+lFK/mazdCET:0Quf0E22n5wzDLU5c3v7CbRTiAdt","tlshash":"20f4238a5ac1df304e59b89500362047b7aadb30fab30cef566344aee9b0d693f7d544","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.630248Z","times_seen":2212,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-2-c4ec327b9e.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.290Z","timestamp":1698439007290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-consumer-2-c4ec327b9e.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 301050\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: 3be6b6de-601e-000a-33e8-835b20000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d8d\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":301050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 658 x 467, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c4ec327b9e9d1fb0ce56254c891f03fe","sha1":"eba0d651e385679fb08a2aa54d25f19ab4ee4448","sha256":"e0d79790de989c7ab117d4dba27e0964b9b7c9b496ee6f8df2476d3a98c55ea5","sha512":"39949e1ba748358c928be6e562be669c8df11adfd3650e37999760e7ff318375f3eb08ff3b12907acba68061cf46a8acf037c41cb8575e8782fbfa4d7c0cb08b","ssdeep":"6144:GBbhzFuKk7cVyqBnfr01URR43zJNNFFdcK7TT+FDuNvzxshZi:GBbhxHzVy8nzqJNNFDRP6FDuFePi","tlshash":"365423a48ecf06e09cfd38bf792d228208d099bbd604c55bc6923245896d6f97def590","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.59542Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":111,"dns":14,"connect":15,"send":0,"wait":29,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/versionless/webfonts/segoeui_semilight.woff2","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.245Z","timestamp":1698439007245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/versionless/webfonts/segoeui_semilight.woff2 HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Wed, 01 Sep 2021 01:25:07 GMT\r\nx-ms-request-id: a41f4beb-401e-0032-78a9-51ffe0000000\r\ncontent-encoding: gzip\r\ncontent-length: 12187\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d14\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12187,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 12164, version 1.0\\012- data","md5":"36ac9a2365173b647657ad829ae64ff0","sha1":"f8966e2ee4c9cfe92b5843d8c27bb7bed98bdfc9","sha256":"633894cf845287f205f1b5bd26b7667dda186695fce3d789306f30c5fbdb14b5","sha512":"9f8c9ec9bb230d577bc751133040ef6fb78185c5310300a420e389879a7abee054095c60ba2a66c6ff3a7ac4fb59b7433a733fceddb72425d3aeb8229ef590fe","ssdeep":"192:H6HeldTaRsyn12Mg0UuCR3A6dTovEIZmiA6JWqNb6aNBPiGXoGJYrI8tTebCFFvK:aHevMsYHeeqcvpZmiA6JWwfXoIa1vpKF","tlshash":"9b42bf4f02c94f10f92aa1f32788a4824bad5877909f2fc2ad5af23d4110396d2b1d3f","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-03-03T19:01:20.900944Z","times_seen":2340,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":117,"dns":2,"connect":10,"send":0,"wait":108,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-3-8d9f5d5cba.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.307Z","timestamp":1698439007307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-consumer-3-8d9f5d5cba.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 281677\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: 3c6b2da3-b01e-0044-74f2-8075a8000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d8f\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":281677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 442, 8-bit/color RGBA, non-interlaced\\012- data","md5":"8d9f5d5cba3c50ebd3b2f94d685705e1","sha1":"2261dfe2845c05b21aa21fadfd5b2e19efe7ee6f","sha256":"5e4e6ddcf74cd9e1e8985666cdba1aeb786a7560d15feb89c1b608e0acb1fbbd","sha512":"94415889569699f79408dc2759a13bfbcf1cdecf4d1fece35b2667be59e232354893ef5cb2f89be46a2562474b1d3cfff001d705b39dc99b5e3016d4aa179f43","ssdeep":"6144:b6wRJAIChca0BJ7p2tlcuczqWCxgrvfKQsIyceshAXdgD8g:LDAWPJNm+hdf9sDhjCDf","tlshash":"f654230d594cb237fb097ec23e83a852be6f175163e17f015a879588b0ad7a448e7e31","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.581437Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":57,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-4-920951c931.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.316Z","timestamp":1698439007316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-consumer-4-920951c931.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 154767\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:02 GMT\r\nx-ms-request-id: 082f00f5-601e-001a-0b18-849e48000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d90\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 448, 8-bit/color RGBA, non-interlaced\\012- data","md5":"920951c931c871936e67c7c41584821a","sha1":"14b7b100edf71124766dfe275d718d3e942d700e","sha256":"f5527778f0292c5bb31c94fa867c3849f0fdb9038d70d17e0049bc07369b4d5d","sha512":"24452de25f7f3175ac57eb6ab2592cd0dec51f63ac7d57ec7df74c5e17aa590736a928020df8a150267e67a30a9189cb1030ba0919d1f747dc1163b666e763cd","ssdeep":"3072:FkAxE8spGPdaSXX4eVbjtIEpHQ41UQezTrwch4Ty88reog/0BAgw8:Fe8w4aSXZVbj6Et17ezTrP4x8o/cAq","tlshash":"59e3128776d6b2a7a072753905fc05f8e86cae6c3515adb21692d34dc2f06f858a33c2","first_seen":"2023-04-18T11:30:36Z","last_seen":"2024-08-21T09:40:10.846117Z","times_seen":1587,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":71,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/unauth-874e057007.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.366Z","timestamp":1698439007366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/unauth-874e057007.js HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 10 Apr 2023 21:03:57 GMT\r\nx-ms-request-id: d4526402-a01e-0067-4fa1-6cef6b000000\r\ncontent-encoding: gzip\r\ncontent-length: 55507\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d15\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55507,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (31998)","md5":"874e057007636f96d186f3ff1ac6e298","sha1":"2df8b664c7671311f701f4a36823c9c319ba907f","sha256":"0077c4be96711e5a136318c4928e14ae40b6d07b95c52d3fb952b71cee8bc8f3","sha512":"9acc92a0fb95c3bc61b26cad745fa4c3857a412a5f21b4290d5dd4dce423e48b6712442c0393b99fc51d4a96381a25fc135ca07e5db0b735b404033f801d4873","ssdeep":"3072:U6Jx9er2j16l32ApNyksnN2993dy72AZ8TAeNVQG:dJLhhOyNnNYW2A2TAefQG","tlshash":"c3e329ddb1c1b46243a360b5507f200fb33f6aa9684d8454f11ae4d93cb896e63a3f6d","first_seen":"2023-04-14T02:42:07Z","last_seen":"2026-03-03T19:01:20.898392Z","times_seen":1660,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-3-f455600b67.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.335Z","timestamp":1698439007335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-commercial-3-f455600b67.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 90429\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: d5872b3f-101e-0000-34fc-83ff97000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d92\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 439, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f455600b671bea74469cbd0de2c49abe","sha1":"9facc63af8c238776bfc67d901ca5ef965fe12a0","sha256":"9e0234933321be89717bad939d8d6608117ce7ad453a5f66db97f0f4e11a6252","sha512":"8181f433a1a7c08e2ce95be0efc3190a7cf5a37c374ab783ac800daad28bfd96c1d6a47db87a59927c1278cb8bddd52eee0ba92d9a5cd7ce77feec2e1a69471e","ssdeep":"1536:UM1StIlmNO6qG3zT3aI9tNDFL9ZBDGUdZDDz88ELd5/wqnpIIbLclV2qur/ptQqy:UM1WWmFiI9/Dt/JZrEh5/xn9sl0/73s/","tlshash":"3c93129be4b5c4f68d90b951a2efdc825aef099a860f72f04443cefed4405f755ca062","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.614626Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":124,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/otel-logger-069110bbb3e233be1960.js","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.458Z","timestamp":1698439007458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/otel-logger-069110bbb3e233be1960.js HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Oct 2023 22:15:00 GMT\r\nx-ms-request-id: 03af9166-c01e-0061-185e-06dcd4000000\r\ncontent-encoding: gzip\r\ncontent-length: 33547\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d76\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: application/javascript\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33547,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65446)","md5":"2de76a406af33f9a3ae1c6ac499c206e","sha1":"a750cf8a17b662db15a581ed959957193e89a195","sha256":"c36ea1355a70da52de0477740e13e50a58cb061b750e0769bebe0360fcf410d0","sha512":"3a655ad231f307a84cd86a0c4a5874c65cfa2e7b0045d01834592562ad9494c9eee692ad98ad518f526032a9d7f9462a8224d573672d142098ef667f5ff9174a","ssdeep":"1536:H/U34aKCTeF/WttZ6bYTCQrTpUt82vllOVE:EL2Sv6cTNbcld","tlshash":"6193b5cdb2c6f026429770b591bf100bb37e69d6380d8424e619e8d67c7855ea323fad","first_seen":"2023-10-26T04:13:29Z","last_seen":"2023-11-01T23:44:55Z","times_seen":74,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-consumer-861afc732e.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.319Z","timestamp":1698439007319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/more-apps-consumer-861afc732e.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 744598\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Feb 2022 22:01:24 GMT\r\nx-ms-request-id: e4bdcf37-801e-0012-09e8-838447000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d91\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":744598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced\\012- data","md5":"861afc732e5a6301b789e506b98b1249","sha1":"4940f1d79468b0e2024fd1afefefc69b389dafe2","sha256":"75ad1d9df3fc0e67c572d7ee41a2d13c8ee928c5348b0633715fe130b003e8b6","sha512":"ae7957f8b7a2cbc84caa6d498b329fb35ce07016dbfd75f06f4d50348fc064287256c5e1af27f57233dd15bee507273a430a4a0631e3670a4df23282032d9dfe","ssdeep":"12288:pZQz0yENP85fPACUN0jZIIwW7pUApw8/12KcPcpAbkhyS2x/51OJNbzg3hzj:7Qz0ZNYf44eIL7pUApFFc0mMTO5Yb83J","tlshash":"81f423ddd7c36f007ae5b35702d40ec72b211e6b2c075e6ba165e1c3e41a286fe0696e","first_seen":"2023-04-18T11:30:37Z","last_seen":"2023-12-15T16:35:27Z","times_seen":1461,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":122,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/bundles/unauth-47f6a8d49b.css","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.230Z","timestamp":1698439007230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/bundles/unauth-47f6a8d49b.css HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Oct 2023 22:36:08 GMT\r\nx-ms-request-id: fbfd4497-b01e-0054-4504-01b0c0000000\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\ncontent-length: 80545\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d77\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80545,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"47f6a8d49b42627c836d26dfea18b96a","sha1":"64433b2cfc6d7a8d3daa3576e0b9e79cfca66761","sha256":"3ff945d03efa9bc9c19f48ca8d2df615efece44374e897ad5cc0db74bc697326","sha512":"36842d3242dd1ac0dd34b17bcae7f273b5d13093f9184fff06420d3c4e6b486e3c26fde0644a44979c3255bde0a0ab046c701ead6481f4254255572dd28dba20","ssdeep":"3072:nMPvxEWQIGKwqfgbL8IcfD4eeC6TahNXrozt135uSMgttf6evPhQ8r:nCvCj7gXgvMSDttCeHy8r","tlshash":"35347d73810322e9973a6d37e7abb90c6004f99241129fd5f4b9a9adc68bbd501433fd","first_seen":"2023-10-19T04:48:52Z","last_seen":"2023-11-09T14:44:08Z","times_seen":483,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":164,"dns":2,"connect":10,"send":0,"wait":179,"receive":15,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-4-b66ce988de.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.337Z","timestamp":1698439007337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-commercial-4-b66ce988de.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 93489\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: 3d6a91fb-b01e-0044-0156-8475a8000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d93\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced\\012- data","md5":"b66ce988dec4c543a4575f32fa67e926","sha1":"1732243cddd2de044800621b380a6f6324ee937f","sha256":"700d7ab8b2a25b9496257865f5d4dbcfbb9a7ef4112315e7dc4a6a58f9834ee9","sha512":"4f02aee16c728cbb2d04ab885a386c38c1cac185a908efda8d8bd245f9f1667d1ee2330893c46e46a26afbb24bc7a7f6ec216463d984de05b9965a09683a3bff","ssdeep":"1536:Dvny3rFRBiYrkfNFw+iw/eSF+DPNLbNp1xn3PW4I7VbYEzdMYY3do:DqBiYruN1WS4DPVT/W4I7/RMD3q","tlshash":"879302cbaa71cc95f877684e469b9ea4633c613286a3650bd5636cedd53e01072ccc85","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.620572Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":142,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-commercial-620d899e6a.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.344Z","timestamp":1698439007344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/more-apps-commercial-620d899e6a.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 737682\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Feb 2022 22:01:24 GMT\r\nx-ms-request-id: 5a3ca6cb-301e-0017-1ffb-83569c000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d95\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":737682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced\\012- data","md5":"620d899e6aaef5da299e7ac5237c2a7b","sha1":"677be89898106026499ae63a543f051b4f9a8da2","sha256":"a47ffc5af116ccdcbdf40bc824310dcc08732712928ef1c1af07aa530d66e7b4","sha512":"e39a0b3182b79bb2f010cce3173a1f536cf8e4fea7344c16c6e36a717b84835fe2016923d46ae86c2c5e890f837138689e9e4dbf3f21ce0853fe29675cf00150","ssdeep":"12288:BLPVy83ZwlZCm3vuvo+arWGkM74D0wjIHa6csoPoPFNjMk31+zy3jaJRbDg:hsuSCMsaUow8Ha6n91Z3EzyAbDg","tlshash":"24f423a8e4f4ef20c084153354694087bb5de1b9b8a65b7ef124f62dcbfc5489b20f92","first_seen":"2023-04-18T11:30:37Z","last_seen":"2025-10-27T17:17:44.621438Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":210,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-rebrand-value-edu-8f1caf2f3b.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.345Z","timestamp":1698439007345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/m365-rebrand-value-edu-8f1caf2f3b.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 511384\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jan 2023 22:30:21 GMT\r\nx-ms-request-id: 214e5de2-101e-0010-2588-353aff000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d96\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":511384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1776 x 472, 8-bit/color RGBA, non-interlaced\\012- data","md5":"8f1caf2f3b50d485bf0a6d444c4d1d03","sha1":"97c09a9b47263c04cc85220ecfb7a48c6287d5f2","sha256":"8f1f7dc238363395c34cd261911fa383e496669404cf2d93b6c4da570fb86e81","sha512":"196b3bb354b61ad2d0d79834605489d4347f4518e0a8aa307883596bdabd2a8b4053c1c64534116929a1d102b690e7f0ba21e49fe93f0216789d5f27397bc56d","ssdeep":"12288:5ith+5Ensie4cw4LcBkdmqYjE18H07aVXf8BWG4ncQU:5it85EnFLcw4LzQIOkaRFk","tlshash":"6ab423a72907f5d9db04263853fd606b3c34147a2669c82424edaf976b3d0af8f4acd1","first_seen":"2023-04-18T11:30:37Z","last_seen":"2025-10-27T17:17:44.586434Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":212,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-1-6f56908e42.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.346Z","timestamp":1698439007346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-edu-1-6f56908e42.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 229283\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:02 GMT\r\nx-ms-request-id: 79c85b83-a01e-0058-63ff-8327c8000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d97\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":229283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 575, 8-bit/color RGBA, non-interlaced\\012- data","md5":"6f56908e42f3398e4c68764a574b2c6a","sha1":"dab99dff2b2401d7c3ae20d1bba5864e41908ecb","sha256":"faf8d5d4a007c272f143124965d15fae555c5f721182d09b626d70e09e6d299b","sha512":"620a3f46f1b1327415ae5b02a4c7920bf5650f8d4cf886bae7b9361bb732862891c24337648bfec85eb28fde283be00dddf26292bc75bd64150d8738b092f629","ssdeep":"6144:KUiHpAJBtHq2McCJWAtIIdYB4CaL8ZDRdvsB:K74t09ZFdSJg8tRdEB","tlshash":"a124231fc510ce65f7b9a1297b978605e7f18a5fe850e80002dba22fe02ade51d6df34","first_seen":"2023-04-18T11:30:37Z","last_seen":"2025-10-27T17:17:44.604703Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":238,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-rebrand-value-commercial-7828e22528.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.328Z","timestamp":1698439007328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/m365-rebrand-value-commercial-7828e22528.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 331630\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Jan 2023 22:30:21 GMT\r\nx-ms-request-id: 1a224395-001e-000c-7088-35689f000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d98\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":331630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1776 x 472, 8-bit/color RGBA, non-interlaced\\012- data","md5":"7828e225282257b91afaabf588db7c21","sha1":"214a29d06cff13e63e45fccabdaa43470484060b","sha256":"62126c9de11ec402a4eaf3caa6d94c1bf77d3db15615c6a4ba6218c483995297","sha512":"0784219b8e06900a1bb019140ba10b42666b30bc86bb6b1b93d90903a2e0708cdc9aa1aa94964383a972c0f66a45be10aad4d50012ecd929810bcd724422add3","ssdeep":"6144:weokHbsSSavgAzr2+hHZKBg+a1sli5kWDCtRTP1xBhW68xj0:XokoLXA3T2Bg+zi5kx71xBhW68xj0","tlshash":"48642371671ece98da3d05f9a1ce6d5bd16fce82f960c4d9092c886f0e48748943b72e","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.618867Z","times_seen":2322,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":274,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-1-rebrand-fdd28e2535.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.277Z","timestamp":1698439007277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-consumer-1-rebrand-fdd28e2535.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 192640\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Oct 2022 21:43:57 GMT\r\nx-ms-request-id: a21d87dc-e01e-003b-0f0c-eeba33000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d9e\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":192640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 460, 8-bit/color RGBA, non-interlaced\\012- data","md5":"fdd28e2535dc9b413135d3838a596f1f","sha1":"bfe06694f2c169b08cf590eb50fd9290215ca3af","sha256":"6303ea77208d32cf37db5a95a4dbf493b93fb0180adc461e3605a0c4638b642a","sha512":"a11d1e9c14849a4caa3d6e5e16ae2901bf1f85600bdcb613a04b8993b721d3bfd792c0d32071601d7b5f555f4eb94ee6977c4966c2184cd6fa4a4422c1ad0653","ssdeep":"3072:sQchEoXzgy88kDKcccsFQbIHdgoT8DBCnpZW5Jl8mA1LQY5Uqq8K133TT:f8FQVccsFQk9QtYsN65U6KpT","tlshash":"b61422e493e7b650dabd5db408544708db5f2ee12dc1e4408d428ac9a93977f2ac4f4f","first_seen":"2023-04-18T11:30:36Z","last_seen":"2023-12-15T16:35:27Z","times_seen":1461,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":292,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.office.com/","fqdn":"www.office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-27T20:36:46.852Z","timestamp":1698439006852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portal.office.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 13 Sep 2023 22:45:31 GMT","end":"Sat, 07 Sep 2024 22:45:31 GMT"},"fingerprint":{"sha1":"13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4","sha256":"B2:9A:B2:F8:18:04:1A:54:39:0D:9E:8F:97:FB:96:92:D2:C0:62:92:3F:D9:1B:34:FE:7B:58:2E:3E:52:CA:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.office.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nset-cookie: OH.SID=77d593d4-1d3a-4791-9206-dd4064dafae3; path=/; secure; samesite=none; httponly\nOH.DCAffinity=OH-noe; expires=Sat, 28 Oct 2023 04:36:46 GMT; path=/; secure; samesite=none; httponly\nOH.FLID=b158a48e-8806-4845-903c-8adf60ef4bb7; expires=Sun, 27 Oct 2024 20:36:46 GMT; path=/; secure; samesite=none; httponly\nCreateFreeAccountButton=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\np.UnauthUserCookie=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\nOhpAuth=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\nOhpToken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\nUserIndex=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/\nMUID=2AB943D02A4D69E103D450672B4368C6; path=/; secure; expires=Wed, 20-Nov-2024 20:36:46 GMT; domain=office.com\r\nrequest-context: appId=\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-ua-compatible: IE=edge,chrome=1\r\nnel: {\"report_to\":\"NelOfficeHubUpload1\",\"max_age\":3600,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\nreport-to: {\"group\":\"NelOfficeHubUpload1\",\"max_age\":3600,\"endpoints\":[{\"url\":\"https://officehub.nel.measure.office.net/api/report?tenantId=unknown\u0026destinationEndpoint=noe\u0026frontEnd=AFD\"}]}, { \"group\": \"csp-endpoint\", \"max_age\": 86400, \"endpoints\": [{ \"url\": \"https://csp.microsoft.com/report/Harmony-App-PROD\" }]}\r\ncontent-security-policy: default-src 'self';base-uri 'self';script-src 'nonce-3ssN90nJ2aspNm1WjdsvTw==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' *.cdn.office.net *.microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: *.cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com *.microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com *.office.com *.cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;\r\nx-cache: CONFIG_NOCACHE\r\nx-msedge-ref: Ref A: 5A315FC44DB5476FA09C43CD36086A28 Ref B: SVG20EDGE0319 Ref C: 2023-10-27T20:36:46Z\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709877,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max speed, from TOPS/20\\012- data","md5":"2209ef2f2b1325425aa173a20d15c22a","sha1":"ab553c38803392ea08dddbcb543c01556443d6e8","sha256":"abf3ff8df84d4a77c2e02b489d2b3da2737d4870279cb5024f91c226d0a83325","sha512":"517771d949e66d0552bcc4959694cccc525877dbfda2fc8ad4c431ea840dd33f41f3b1cf910a513397da55722b294b84d2f6d378772d8775106533d9c11757c4","ssdeep":"12288:0IcAOYRf/cJUUYkTRT9O49M0cJTOuad072FAQ6JZfgBXv4sZlmiLVRXvfsg:waRHBUYcRT9O4VqTOaPQ6JZfkvfmQsg","tlshash":"d7e423ec9be8de728e5e925fb13f5408ad726533bbf134191d2d2ac7541836820b5273","first_seen":"2023-10-27T22:37:12Z","last_seen":"2023-10-27T22:37:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-1-c12cd6bc84.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.331Z","timestamp":1698439007331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-commercial-1-c12cd6bc84.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 288266\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:00 GMT\r\nx-ms-request-id: 15870a12-e01e-0059-3afd-807814000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d9f\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":288266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 588, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c12cd6bc8402c20079eccd87115b50cc","sha1":"5c8a6f635b00f83289039e8a027a4cb03cc47675","sha256":"a5fbdf8aafdbee42005a4dcaac5fa402a79aa8f153486a5ade74e92085504adf","sha512":"f6b06069708471f2199d3767b2d5b104a54ef7586b349bf7e7f13027aaee6123db608e9f92142020df15a46f155357763ea6457ecf34ca45e4d2dc82dab117e1","ssdeep":"6144:Q+nqsKf+6HM2XW1KN+kB9Q3Wpiwox3jW4TcU6SZvBjw:RqsKWAZXW1KNN8+iwojT6SPw","tlshash":"295423a5778280ae74eb80f8775bb6ad272942441d312bc75f4e10c876cec3ea394d6c","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.623203Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":326,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-2-f143e5c2d2.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.333Z","timestamp":1698439007333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/highlight-commercial-2-f143e5c2d2.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 124874\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Jan 2022 01:25:01 GMT\r\nx-ms-request-id: a259547b-a01e-003a-06e8-83e5ef000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85da0\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 658 x 497, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f143e5c2d232cdcf3fa06da4473e0372","sha1":"0dfe81fe5425e7ee37e35c1107114ea3df7febca","sha256":"5f1bbca25424c86893414de6f44a39a9f28294679e975586a9633a90247d89fd","sha512":"c626bc82bd529b99dc7b29ee7f067272d0adf0a4acdd38defe70a415db6661794df781e8385c5fedf36fb157938fc93dcc1c3275baf7f43c75b90c2abad632ce","ssdeep":"3072:9vnQ80XKBZ1vrf2zaL7DWe5pFbvFlhUEi+Fbc:9vnQOZ1vrfNnlbtlWN","tlshash":"21c312f7e49cf87fab592da4c6cfc11575a8833c00952831a52cdd7618ba134f39ac9a","first_seen":"2023-04-18T11:30:36Z","last_seen":"2025-10-27T17:17:44.626492Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":333,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js","fqdn":"wcpstatic.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.460Z","timestamp":1698439007460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wcpstatic.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 Sep 2023 00:00:00 GMT","end":"Tue, 03 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8D:23:2F:0D:7F:40:61:58:88:D7:7E:2D:4F:2F:00:2E:82:81:FA:77","sha256":"19:13:F5:9C:E6:4A:BA:2C:FB:79:31:82:D5:79:44:8C:3D:2E:68:CE:4A:57:DB:CA:83:04:0F:97:01:CD:B2:F8"}}},"request":{"raw":"GET /mscc/lib/v2/wcp-consent.js HTTP/1.1\r\nHost: wcpstatic.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-length: 81726\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncontent-md5: X1JOIM5h9UISVFS6+GfEew==\r\nlast-modified: Wed, 24 Aug 2022 17:34:36 GMT\r\nage: 39315\r\netag: 0x8DA85F6EA62BF74\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding\r\nx-cache: CONFIG_NOCACHE\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 77d81d10-f01e-0040-78b9-08e462000000\r\nx-ms-version: 2009-09-19\r\nx-azure-ref: 0Xh88ZQAAAADL+rOi+/XNSbAcWSRfgYjyU1ZHMjBFREdFMDYyMgAzOWI0NjE1Ny1jYjllLTQ5YjctYTY1YS04NzIyYTNmODI0ZTQ=\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81726,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (63888), with no line terminators","md5":"5f524e20ce61f542125454baf867c47b","sha1":"7e9834fd30dcfd27532ce79165344a438c31d78b","sha256":"c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9","sha512":"224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2","ssdeep":"6144:dIcsZZWWI0BDqL9W4sC6Hdo7NjIZjIZP0hZRWLF9LmSF/EI:dIcsZtI0BGoHdo7NjIZjIZP0vC75F/x","tlshash":"98546d7fe3c420ad03012346b885bb39ba1d067d7691d6c5f84ca57d23c2b95c52abfa","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-04-17T01:28:09.206444Z","times_seen":9653,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":224,"dns":10,"connect":38,"send":0,"wait":43,"receive":56,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31","fqdn":"img-prod-cms-rt-microsoft-com.akamaized.net","domain":"img-prod-cms-rt-microsoft-com.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.186","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.266Z","timestamp":1698439007266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 May 2023 00:00:00 GMT","end":"Wed, 15 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"A3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9","sha256":"22:72:3F:E9:0C:8C:B6:2A:43:CC:52:84:08:56:46:13:07:5E:76:AC:F7:FF:45:E9:54:2C:7C:E7:7C:6D:B3:72"}}},"request":{"raw":"GET /cms/api/am/imageFileData/RE1Mu3b?ver=5c31 HTTP/1.1\r\nHost: img-prod-cms-rt-microsoft-com.akamaized.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncontent-location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE1Mu3b?ver=5c31\r\nlast-modified: Thu, 19 Oct 2023 16:39:20 GMT\r\nx-source-length: 4054\r\nx-datacenter: westcenus\r\nx-activityid: 0263108a-fa82-4e02-8efe-1045fbf9f681\r\ntiming-allow-origin: *\r\ncontent-length: 4054\r\ncache-control: public, max-age=115242\r\nexpires: Sun, 29 Oct 2023 04:37:28 GMT\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nalt-svc: h3-Q050=\":443\"; ma=93600,quic=\":443\"; ma=93600; v=\"46,43\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced\\012- data","md5":"9f14c20150a003d7ce4de57c298f0fba","sha1":"daa53cf17cc45878a1b153f3c3bf47dc9669d78f","sha256":"112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960","sha512":"d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487","ssdeep":"","tlshash":"d0816d07ff018801919ee9570485507acb618cd1e7f91061a987c825c9b5cf82abcde7","first_seen":"2023-04-05T04:39:01Z","last_seen":"2026-04-17T01:28:09.155738Z","times_seen":9978,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":155,"dns":10,"connect":64,"send":0,"wait":14,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.687Z","timestamp":1698439009687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff HTTP/1.1\r\nHost: www.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.microsoft.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff\r\nlast-modified: Fri, 20 Oct 2023 00:04:19 GMT\r\nx-activity-id: 381dc854-4f04-4f10-a847-f6a4e86c8fae\r\nx-appversion: 1.0.8658.39781\r\nx-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-09-16T06:06:02.0000000Z}\r\nms-operation-id: ff1f6e4ea32fb24291de73dcb13e86bd\r\np3p: CP=\"CAO CONi OTR OUR DEM ONL\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 26288\r\ncache-control: public, max-age=30857214\r\nexpires: Sat, 19 Oct 2024 00:03:42 GMT\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\ntls_version: tls1.3\r\nstrict-transport-security: max-age=31536000\r\nms-cv: CASMicrosoftCV4236e3cc.0\r\nms-cv-esi: CASMicrosoftCV4236e3cc.0\r\nx-rtag: RT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26288,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 26288, version 0.0\\012- data","md5":"d0263dc03be4c393a90bda733c57d6db","sha1":"8a032b6deab53a33234c735133b48518f8643b92","sha256":"22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12","sha512":"9511bef269ae0797addf4cd6f2fec4ad0c4a4e06b3e5bf6138c7678a203022ac4818c7d446d154594504c947da3061030e82472d2708149c0709b1a070fdd0e3","ssdeep":"768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/","tlshash":"20c2e197c410d15dd123f2b5592b2f6c9a9220ac775e2a2606ce730b1ceeb3253a7357","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-04-17T01:28:09.176322Z","times_seen":9362,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/unauth-m365-hero-treatment-b-288e7c77d3.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.270Z","timestamp":1698439007270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/unauth-m365-hero-treatment-b-288e7c77d3.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 5512214\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Sep 2023 22:11:42 GMT\r\nx-ms-request-id: aa660119-401e-001d-4782-e2f22b000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d99\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5512214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4742 x 2732, 8-bit/color RGBA, non-interlaced\\012- data","md5":"288e7c77d34b03f527ae7cee40ff431b","sha1":"1d35dcac754498fed1249d89d3b144fa7bf8e9c9","sha256":"1f7d1fec9454c08dd4410cd124b215a214ef29bcd2db7b3bd293564814db3831","sha512":"489f37e7d85c84a2af3777c9a2f182b113f6a28ebc25d09f38c591b995c140e8f32f903d950bf1d3242b7a027d82fa68d4e5a14e8bfc6893394a415668a88d07","ssdeep":"98304:llWDQ0GgH+BfteRS1X/nqJWfImpj/OjdnylpKf1sQ0lPBsAcRtKEjHsGBrNZbg8L:HrEeBfteRShoWA2UpylpI1Clqb5MGBBv","tlshash":"fb4623a9644e8deb33ea94288d923856c30d0513793b4c30fb9ff504a15ef7496e9d2b","first_seen":"2023-09-12T08:23:30Z","last_seen":"2025-06-20T22:06:33.906682Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":2660,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":276,"receive":2251,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2","fqdn":"c.s-microsoft.com","domain":"s-microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.684Z","timestamp":1698439009684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /static/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1\r\nHost: c.s-microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.microsoft.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 34052\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 10 Jan 2020 19:09:43 GMT\r\naccept-ranges: bytes\r\netag: \"588d483e9c7d51:0\"\r\ncache-control: public, max-age=536257\r\nexpires: Fri, 03 Nov 2023 01:34:25 GMT\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0\\012- data","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-04-17T01:28:09.154494Z","times_seen":10437,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":224,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2","fqdn":"c.s-microsoft.com","domain":"s-microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.686Z","timestamp":1698439009686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /static/fonts/segoe-ui/west-european/Semibold/latest.woff2 HTTP/1.1\r\nHost: c.s-microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.microsoft.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 29388\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 10 Jan 2020 19:09:43 GMT\r\naccept-ranges: bytes\r\netag: \"5b68d583e9c7d51:0\"\r\ncache-control: public, max-age=280644\r\nexpires: Tue, 31 Oct 2023 02:34:12 GMT\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29388, version 0.0\\012- data","md5":"6e75a94d5f7170a1ab532d32c2a35755","sha1":"9c1b6fff544089941bbeddbcf529c3f0b46d853a","sha256":"d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f","sha512":"27cdbf98a3f42510eaeb28437e3c4661734b685d63eff5e47364ac46b73de617894edcb19ddd9afd955de192cfd8bb755998ed609ec2c279e9afab3db2583175","ssdeep":"768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e","tlshash":"f0d2e1ceb288a6b2cf6f2234d60344d63a3be647565d38b4adc49d918b20d0fe4dd04b","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-04-17T01:28:09.172491Z","times_seen":9839,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":26,"dns":1,"connect":4,"send":0,"wait":231,"receive":116,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/favicon_m365-67350a08e8.ico","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:50.145Z","timestamp":1698439010145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/favicon_m365-67350a08e8.ico HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 285478\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 17 Oct 2022 21:37:18 GMT\r\nx-ms-request-id: 18d7b315-501e-003e-3702-e368e8000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439009.62b88219\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":285478,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\\012- data","md5":"67350a08e8a8885eb2f30f6a1b36dfb6","sha1":"94ffdcd8f82968a6ae300e72ebbf083ed9d15232","sha256":"4b459f4f645ea3044747f1d9a0c0ac83c4754bf43246e95bfbe04519849286d6","sha512":"29d17897916965ee9fb9d875ffdf85e9bf4642dc88b82b52eb1a4bd511347c4fc8301c9649260f2a70a49a6479ff50ee5cda1c5a7cfc3ab0f1f83ded09e17442","ssdeep":"6144:G90lzrelZLOJaWSr2I68RBI77n4aJUuLisfubV:G0lzrelZLOJaWSr2I68RBI77n4aJUuL+","tlshash":"9e54e7693fad425bc8041a31cc9266653a6f1c7e1fa74456bdb4bb7c203289202f5dfb","first_seen":"2023-04-10T21:29:07Z","last_seen":"2024-08-21T09:40:10.857647Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":18,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2","fqdn":"c.s-microsoft.com","domain":"s-microsoft.com","tld":"com"},"ip":{"addr":"23.38.201.156","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.684Z","timestamp":1698439009684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /static/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1\r\nHost: c.s-microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.microsoft.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 34052\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 10 Jan 2020 19:09:43 GMT\r\naccept-ranges: bytes\r\netag: \"588d483e9c7d51:0\"\r\ncache-control: public, max-age=536256\r\nexpires: Fri, 03 Nov 2023 01:34:25 GMT\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0\\012- data","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-04-17T01:28:09.154494Z","times_seen":10437,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":224,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/scripts/me/MeControl/10.23271.5/en-US/meCore.min.js","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:50.217Z","timestamp":1698439010217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Oct 2023 22:07:15 GMT","end":"Thu, 17 Oct 2024 22:07:15 GMT"},"fingerprint":{"sha1":"35:07:0F:A2:57:03:9D:87:1C:4A:44:52:5D:35:DF:30:45:0E:A9:F6","sha256":"A8:C5:3A:0E:F1:9D:06:93:E1:98:97:74:A3:CA:26:39:CD:34:C2:07:69:EF:E5:E2:51:CC:A2:92:13:1C:12:5B"}}},"request":{"raw":"GET /scripts/me/MeControl/10.23271.5/en-US/meCore.min.js HTTP/1.1\r\nHost: mem.gfx.ms\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Tue, 10 Oct 2023 21:40:56 GMT\r\netag: \"1d9fbfd1f9e35a1\"\r\nx-cache: TCP_HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-azure-ref-originshield: 0bZg6ZQAAAACOL0W0V9ESTKgcQ8bQ7jp5QU1TMDRFREdFMTkyMgBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\nx-azure-ref: 0YR88ZQAAAAA/G5QwFJDoRKv1B2kqqzYPU1ZHMjBFREdFMDUwNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45262,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (34235), with CRLF, LF line terminators","md5":"6fe3dd83a0d98bc1977f57ea33c37693","sha1":"8df606f40e4cc8c07ce929d5a82fd5304eaf4eb7","sha256":"a5268a183f2a091d2d17773997e89a25fc45cbd60e586edf61f544fb85d6f6a8","sha512":"b81c2eb3bfa8ecf1ffcbb24e4a776cd2b083460a0ac53213eaf48997ac27bb20f49ceff3a098aeba33b3ad4f74ca86b5018afe6689a260f011df4249029ce78b","ssdeep":"3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ","tlshash":"43a3549d5e01a73775a70d9a31fac66e127fe13894c4e786fab5987c028cb91e013b43","first_seen":"2023-03-13T21:04:48Z","last_seen":"2026-04-16T23:09:33.431968Z","times_seen":6295,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/versionless/webfonts/segoeui_semibold.woff2","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:50.399Z","timestamp":1698439010399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/versionless/webfonts/segoeui_semibold.woff2 HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.cdn.office.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\nlast-modified: Wed, 01 Sep 2021 01:24:24 GMT\r\nx-ms-request-id: c44c0a88-001e-000c-24cd-46689f000000\r\nvary: Accept-Encoding\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\ncontent-length: 11356\r\nquic-version: 0x00000001\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439009.62b88507\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11356,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 11356, version 1.0\\012- data","md5":"dac73dc7b1eb35cd360da41648de072b","sha1":"da1f6a5f46b72320a55b398f5f66d5e9aa6132f1","sha256":"2cd3ef7b5b677b7827bfbe5b926a283e7ca687ddb6b021fa4289630671ebd061","sha512":"366155ff687c7892aabd45c875f6d9d695afdc247b807b18094c18abd4bf6e415e9c78ce2ede4076c378e659c51b1050c10323572e728b6e179f8ed1cd4a6057","ssdeep":"192:bkChSYgOv8Dxgh8lDxlYOT9hNP84LmuuDm3TyRKySHvJWcUihSCtv46A4oNr8oYe:hM8kzlVlz5X08muW2TykySHBAeU4SnYe","tlshash":"6f32bfe963946d2afa3009358295b6dc260d83f0a7c5fc96018e4417d1acffb62caed0","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-03-03T19:01:20.902669Z","times_seen":2402,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:52.223Z","timestamp":1698439012223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://www.office.com\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T03:13:33.193802Z","times_seen":13844586,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:52.223Z","timestamp":1698439012223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.8\r\napikey: aa86c364bc9e4a5a94a6b232c110af26-72da2ec9-498a-44df-8cca-7fd88cf654c1-7527\r\nupload-time: 1698439010502\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 6838\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 153\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\nset-cookie: MC1=GUID=48d9da3f6b754ed5b61c01be9ef02b97\u0026HASH=48d9\u0026LV=202310\u0026V=4\u0026LU=1698439009992; Domain=.microsoft.com; Expires=Sat, 26 Oct 2024 20:36:49 GMT; Path=/;Secure; SameSite=None\nMS0=e90ee6f8667b4f4c810e014bafe2c986; Domain=.microsoft.com; Expires=Fri, 27 Oct 2023 21:06:49 GMT; Path=/;Secure; SameSite=None\r\ntime-delta-millis: -510\r\naccess-control-allow-headers: P3P,Set-Cookie,time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.office.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"37b0dd95f1f97117ed651460bd0124fa","sha1":"9e8d0a306029a62eadb1d244a6b1c255391cdc1a","sha256":"e99a17e4b60374f3216ae1e5abc515bd8114ada7f7a7f1ca72c02494154ce6f3","sha512":"286d667bfbf1834d9f2a7d15e910b2857e568f293fd7c17fa5f71ebe177ee9141637ca193821a45a329f56c569114e86f91d456087615c56fa1c8c2d9156d890","ssdeep":"","tlshash":"e1c08cc5671ad23018222a28c842a68f479cf5580c0661b8888cd00b038954c8a8e740","first_seen":"2023-10-27T22:37:12Z","last_seen":"2023-10-27T22:37:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:52.223Z","timestamp":1698439012223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.8\r\napikey: aa86c364bc9e4a5a94a6b232c110af26-72da2ec9-498a-44df-8cca-7fd88cf654c1-7527\r\nupload-time: 1698439011506\r\ntime-delta-to-apply-millis: -510\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 1111\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MC1=GUID=48d9da3f6b754ed5b61c01be9ef02b97\u0026HASH=48d9\u0026LV=202310\u0026V=4\u0026LU=1698439009992; MS0=e90ee6f8667b4f4c810e014bafe2c986\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 153\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ntime-delta-millis: -811\r\naccess-control-allow-headers: time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.office.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Fri, 27 Oct 2023 20:36:50 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"fc5be6a264cb39fcfaa2623f99125427","sha1":"e2136c8dcfbea72b14eab23d828bc792a25d6901","sha256":"3790a2fc0b6e8ab4a7350d22e1900935ce208dd5437ebe8d4e85f4d45fa2a9fe","sha512":"8983233c989d51ad2350fac4d5192e09b43493f0d4366c7861ceac761d570314e289ac91a4019005847d4d6c9198b01257d9885348fcbac29fc91537c738b530","ssdeep":"","tlshash":"eac08cc5621ad23018221a28c802a68f078cf56c0c0662b8888cd00b038d58c8a8e740","first_seen":"2023-10-27T22:37:12Z","last_seen":"2023-10-27T22:37:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:51.561Z","timestamp":1698439011561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"OPTIONS /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, 3600\r\ncontent-length: 0\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://www.office.com\r\ndate: Fri, 27 Oct 2023 20:36:50 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T03:13:33.193802Z","times_seen":13844586,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:51.561Z","timestamp":1698439011561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=2 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.10\r\napikey: eba120086311400a9b62c4718c0934d3-7ec73bd2-d8e8-450d-84d0-7f0a2ade31ce-7166\r\nupload-time: 1698439011542\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 1909\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MC1=GUID=48d9da3f6b754ed5b61c01be9ef02b97\u0026HASH=48d9\u0026LV=202310\u0026V=4\u0026LU=1698439009992; MS0=e90ee6f8667b4f4c810e014bafe2c986\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 24\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ntime-delta-millis: -753\r\naccess-control-allow-headers: time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.office.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Fri, 27 Oct 2023 20:36:50 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24,"size_decoded":0,"mime_type":"text/plain","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"5562a90bba46ae4a7dba099d68f4a42a","sha1":"ac7cf704563b3e32cc67770ea72a3873cc6fc146","sha256":"afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58","sha512":"71f4c41a3ef48bb8c384fdf71e1fe52375b81b31d8e93a8ac98c580ac1b592ef96546332a97628eebbfacd44c75d48a1b1eeecd7eed71580207a130d5f8bef20","ssdeep":"","tlshash":"c4700022200080a280080800c80002eba800202c0808a2c80a0c80088008c80200a20c","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-04-17T03:01:28.335215Z","times_seen":8009,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.events.data.microsoft.com/OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0","fqdn":"browser.events.data.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"20.50.80.210","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:52.223Z","timestamp":1698439012223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.events.data.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Oct 2023 07:35:20 GMT","end":"Thu, 26 Sep 2024 07:35:20 GMT"},"fingerprint":{"sha1":"2D:1B:7E:75:FB:77:62:F6:4B:98:A3:53:93:A2:4B:72:0A:7E:D0:53","sha256":"D3:A0:41:11:8E:3D:12:3B:35:F8:32:FD:72:8C:31:5B:F8:44:4D:9E:E4:41:CD:F9:1E:5A:67:5E:44:E0:1D:1B"}}},"request":{"raw":"POST /OneCollector/1.0/?cors=true\u0026content-type=application/x-json-stream\u0026w=0 HTTP/1.1\r\nHost: browser.events.data.microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nClient-Id: NO_AUTH\r\nclient-version: 1DS-Web-JS-3.2.7\r\napikey: b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888\r\nupload-time: 1698439012217\r\ntime-delta-to-apply-millis: use-collector-delta\r\ncache-control: no-cache, no-store\r\ncontent-type: application/x-json-stream\r\nContent-Length: 19499\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: MC1=GUID=48d9da3f6b754ed5b61c01be9ef02b97\u0026HASH=48d9\u0026LV=202310\u0026V=4\u0026LU=1698439009992; MS0=e90ee6f8667b4f4c810e014bafe2c986\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 154\r\ncontent-type: application/json\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\ntime-delta-millis: -819\r\naccess-control-allow-headers: time-delta-millis\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.office.com\r\naccess-control-expose-headers: time-delta-millis\r\ndate: Fri, 27 Oct 2023 20:36:50 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"5bed0a2cf7f7d09f5602c48b298afd88","sha1":"491c53af23214c81864545f5f481e5147a25f390","sha256":"e83935e8158492ff6432283b63740719b9db7853144b6121df34dd49c15e165e","sha512":"f684d2aeab28c707708dd62b0a25ae3810878fca227157077a11b6836684688e915aa39bd0f9dcd59a6df8ce5bb2b1d71c0de131265f8e91fc6cd6dbf32790c6","ssdeep":"","tlshash":"16c08cc5621ad23018225a28cc82ea8e078cf56c0c0661b8888ce01b038a58c8a8e740","first_seen":"2023-10-27T22:37:12Z","last_seen":"2023-10-27T22:37:12Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/me/mecache?partner=office\u0026wreply=https%3A%2F%2Fwww.office.com","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:50.266Z","timestamp":1698439010266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Oct 2023 22:07:15 GMT","end":"Thu, 17 Oct 2024 22:07:15 GMT"},"fingerprint":{"sha1":"35:07:0F:A2:57:03:9D:87:1C:4A:44:52:5D:35:DF:30:45:0E:A9:F6","sha256":"A8:C5:3A:0E:F1:9D:06:93:E1:98:97:74:A3:CA:26:39:CD:34:C2:07:69:EF:E5:E2:51:CC:A2:92:13:1C:12:5B"}}},"request":{"raw":"GET /me/mecache?partner=office\u0026wreply=https%3A%2F%2Fwww.office.com HTTP/1.1\r\nHost: mem.gfx.ms\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, no-transform, max-age=43200\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nexpires: Fri, 27 Oct 2023 22:59:11 GMT\r\nx-cache: TCP_HIT\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors https://www.office.com;\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-azure-ref-originshield: 0oek7ZQAAAABrzXrBJsxHRJs3x+v1GQ6FQU1TMDRFREdFMTgxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\nx-azure-ref: 0YR88ZQAAAACVMkfTq9/+T73bzHcvfq41U1ZHMjBFREdFMDUxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\ndate: Fri, 27 Oct 2023 20:36:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3377,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3524), with no line terminators","md5":"625a7322b524c7e9d937475ba08cb1a9","sha1":"4c686eaaa6b8928d7a047009ed52a9ad20c1d8bd","sha256":"f3939dcb85b6a9dfb1effcfaff075d3d71c026ca2218bd194e180dc6b88e62e7","sha512":"360b93557ec57de6e5163a2bcaf7efa400823e476329903b2efb4bbc523ddf5cce77cd584966d3d3baf457937886703471a9e632bc82d930004566adb68c582d","ssdeep":"","tlshash":"7d71260f680022384a933f6d1ffda4657a7273880563d6203e5e91477758b95c5bebbc","first_seen":"2023-04-06T20:58:23Z","last_seen":"2024-08-21T09:40:10.864723Z","times_seen":1584,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"office.com/","fqdn":"office.com","domain":"office.com","tld":"com"},"ip":{"addr":"13.107.6.156","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-27T20:36:46.750Z","timestamp":1698439006750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portal.office.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 13 Sep 2023 22:45:31 GMT","end":"Sat, 07 Sep 2024 22:45:31 GMT"},"fingerprint":{"sha1":"13:5B:CB:71:C9:C4:5D:B5:78:0C:8B:88:FD:74:B6:7A:C3:F0:C8:B4","sha256":"B2:9A:B2:F8:18:04:1A:54:39:0D:9E:8F:97:FB:96:92:D2:C0:62:92:3F:D9:1B:34:FE:7B:58:2E:3E:52:CA:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: office.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://www.office.com/\r\nx-msedge-ref: Ref A: 9BCF66C0865844C38C294C12FE5FAE3A Ref B: SVG20EDGE0319 Ref C: 2023-10-27T20:36:45Z\r\ndate: Fri, 27 Oct 2023 20:36:45 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":216454,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T03:13:33.193802Z","times_seen":13844586,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":59,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/scripts/me/MeControl/10.23271.5/en-US/meBoot.min.js","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.696Z","timestamp":1698439009696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Oct 2023 22:07:15 GMT","end":"Thu, 17 Oct 2024 22:07:15 GMT"},"fingerprint":{"sha1":"35:07:0F:A2:57:03:9D:87:1C:4A:44:52:5D:35:DF:30:45:0E:A9:F6","sha256":"A8:C5:3A:0E:F1:9D:06:93:E1:98:97:74:A3:CA:26:39:CD:34:C2:07:69:EF:E5:E2:51:CC:A2:92:13:1C:12:5B"}}},"request":{"raw":"GET /scripts/me/MeControl/10.23271.5/en-US/meBoot.min.js HTTP/1.1\r\nHost: mem.gfx.ms\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Tue, 10 Oct 2023 21:40:52 GMT\r\netag: \"1d9fbfd1d3fa1e7\"\r\nx-cache: TCP_HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-azure-ref-originshield: 0P/I7ZQAAAAAarK1nOZ6dSqiIg8KbfUCRQU1TMDRFREdFMTkxNQBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\nx-azure-ref: 0YR88ZQAAAAA0HZfWdgOQQqxO8Mpe9pyMU1ZHMjBFREdFMDUwNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181223,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9839b66d7c986a67a821e7b3783bdf69","sha1":"4f356c1a92358156486ee50921fe4c728f6d0eac","sha256":"fa334c1e3766c50298f83ee32aed20fcd0978230350837dc7cb9115d096a7167","sha512":"aca1ce5c4821d38c3833abf0dc82493a3e0444b58d70b5b2e756cf94744823ee243eee50e36637af28e04a4d0b5bdaf318af38df0925152f062add7e6c6735c3","ssdeep":"3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQf+SB7qSASyntnh:2smT+X+NLJar+S9qSASyntnh","tlshash":"0c04f8d96241f03a4b42ac10b73f091aa13bacb575c8c348f5a9f8dd68bb945943ff64","first_seen":"2023-04-05T02:11:24Z","last_seen":"2024-08-21T09:40:10.862415Z","times_seen":2189,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":391,"dns":18,"connect":10,"send":0,"wait":12,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mem.gfx.ms/meversion?partner=office\u0026market=en-us\u0026uhf=1","fqdn":"mem.gfx.ms","domain":"gfx.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.613Z","timestamp":1698439007613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Oct 2023 22:07:15 GMT","end":"Thu, 17 Oct 2024 22:07:15 GMT"},"fingerprint":{"sha1":"35:07:0F:A2:57:03:9D:87:1C:4A:44:52:5D:35:DF:30:45:0E:A9:F6","sha256":"A8:C5:3A:0E:F1:9D:06:93:E1:98:97:74:A3:CA:26:39:CD:34:C2:07:69:EF:E5:E2:51:CC:A2:92:13:1C:12:5B"}}},"request":{"raw":"GET /meversion?partner=office\u0026market=en-us\u0026uhf=1 HTTP/1.1\r\nHost: mem.gfx.ms\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, no-transform, max-age=43200\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nexpires: Fri, 27 Oct 2023 18:49:16 GMT\r\nx-cache: TCP_HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-azure-ref-originshield: 0Cfw7ZQAAAACOes6o08rzQYtE2E96+etTQU1TMDRFREdFMTgxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\nx-azure-ref: 0Xh88ZQAAAABUp1nF+wOOTbN6hsJu37pbU1ZHMjBFREdFMDUxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30197,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (30145)","md5":"4d4e8b0f7460871f054e91458b140e89","sha1":"20ea295d5b00e6a3612f8f7610e1b818080cd2f4","sha256":"d4eea8395d57d96a30bac43176681506d2c0d5ae0bf5272c67199853cd1fec52","sha512":"4b5d710a86bea633420b62d337b44f8f18738b55c0668d225771d6693046bf919f7e6a295aef950fecb04634b58bb8206a8d7b97155924b535a735880c65e976","ssdeep":"768:z2M2k07M0FdKF4XrA952MYIVFZ6nlqMy6aAw6Rz1yg:zDh075rKt52DIVFZTP6aAw6R5yg","tlshash":"76d2f88a76c0b17582633178a67f650ff3366aa1744d8518e44afcda7cbc80da123f9d","first_seen":"2023-10-14T05:16:57Z","last_seen":"2024-08-21T04:46:21.994076Z","times_seen":1045,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":147,"dns":8,"connect":29,"send":0,"wait":20,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cdn.office.net/officehub/images/content/images/unauth-refresh/value-consumer-e73e46d493.png","fqdn":"res.cdn.office.net","domain":"office.net","tld":"net"},"ip":{"addr":"23.36.79.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:47.273Z","timestamp":1698439007273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.res.outlook.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Apr 2023 00:00:00 GMT","end":"Wed, 17 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE","sha256":"8D:4F:DD:9B:85:31:A2:02:19:88:E3:DB:7C:BC:56:96:F1:2B:D9:43:F7:C3:D3:03:C2:44:C6:19:14:BA:22:F2"}}},"request":{"raw":"GET /officehub/images/content/images/unauth-refresh/value-consumer-e73e46d493.png HTTP/1.1\r\nHost: res.cdn.office.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 670470\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Feb 2022 22:29:26 GMT\r\nx-ms-request-id: 8b953aea-701e-0064-30eb-830e0f000000\r\ncache-control: max-age=630720000\r\ndate: Fri, 27 Oct 2023 20:36:46 GMT\r\nreport-to: {\"group\":\"NelM365CDNUpload1\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide\u0026DestinationEndpoint=OSLO\u0026ASN=20940\u0026Country=NO\u0026Region=\u0026RequestIdentifier=0.274f2417.1698439006.62b85d9a\"}],\"include_subdomains \":true}\r\nnel: {\"report_to\":\"NelM365CDNUpload1\",\"max_age\":604800,\"include_subdomains\":true,\"failure_fraction\":1.0,\"success_fraction\":0.01}\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn-provider: Akamai\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":670470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 507, 8-bit/color RGBA, non-interlaced\\012- data","md5":"e73e46d4935123e170587b9285528242","sha1":"8ca446f65513228d8027cb26038b951615e013d0","sha256":"f3b0d16348c0284c2f1a40e2142268e4a039e6e66c45237e5f61024071d70059","sha512":"f1a75373a4795949ccee6132709534ee81f97567282c85acddc729da62f3a6ab3f4567c871fc513e4e61392b6272e38f308fb15c80dca73b8874710ac37248d9","ssdeep":"12288:hRf/cJUUYkTRT9O49M0cJTOuad072FAQ6JZfgBXv4sZlmiLVRXvfsg:hRHBUYcRT9O4VqTOaPQ6JZfkvfmQsg","tlshash":"d1e423dc9fe8ed729e5e925fb13fa408edb27433bbf024191c6d36c6581835920b5262","first_seen":"2023-04-18T11:30:37Z","last_seen":"2024-08-21T09:40:10.851716Z","times_seen":1587,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":283,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js","fqdn":"js.monitor.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.office.com/","date":"2023-10-27T20:36:49.694Z","timestamp":1698439009694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"js.monitor.azure.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 20 Sep 2023 05:47:48 GMT","end":"Sat, 14 Sep 2024 05:47:48 GMT"},"fingerprint":{"sha1":"FF:8C:AA:D5:CE:B8:1C:2B:92:4E:2E:4C:30:25:29:9E:54:57:FC:73","sha256":"9B:5C:80:19:1A:61:70:96:EF:74:C9:15:4C:9B:CF:C4:69:7E:72:40:0C:EB:4F:05:D7:A4:1C:19:41:C8:A4:88"}}},"request":{"raw":"GET /scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js HTTP/1.1\r\nHost: js.monitor.azure.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.office.com/\r\nOrigin: https://www.office.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000, immutable, no-transform\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-md5: bG4aPNgugaurnXq8OXoQfQ==\r\nlast-modified: Wed, 05 Oct 2022 16:53:03 GMT\r\netag: 0x8DAA6F2118B127C\r\nx-cache: TCP_HIT\r\nx-ms-request-id: e29e4dea-b01e-00f1-1adf-0716dc000000\r\nx-ms-version: 2009-09-19\r\nx-ms-meta-jssdkver: 3.2.7\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref-originshield: 0FQU8ZQAAAAA9I7e4G9MhSJvidU5exn8/QU1TMDRFREdFMTkxMwBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=\r\nx-azure-ref: 0YR88ZQAAAAB8oouksYPWR7kXIEXnh8Q1U1ZHMjBFREdFMDYxNQBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=\r\ndate: Fri, 27 Oct 2023 20:36:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90648,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65395)","md5":"6c6e1a3cd82e81abab9d7abc397a107d","sha1":"246f870580dcdace936284daa47a08e7e54355cf","sha256":"077052944d805da1cd832b70df86d282be6a1309626c646fc36dacdc9fbc7ddb","sha512":"7862666c1dbc51b181a03cef28b46da008cd1aa4a8f852daa780a596246d4af0f5398f5d062de6afd83841a286b8d3a1e283e0248ce7f7f5de6f9199a7413e01","ssdeep":"1536:alpxflyayPSKPCyxc6hJdHdK6k5tC1irbZ9rHgcw9l:alpxflyafxx6hJpIT3AF","tlshash":"7b93e7cd75c2f066436b7075903f200fa33f5995284c8954e229e4da7cb946ea367fac","first_seen":"2023-05-20T15:05:46Z","last_seen":"2025-08-18T18:58:50.565337Z","times_seen":2063,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":396,"dns":4,"connect":10,"send":0,"wait":12,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}