baufirmagebhard-my.sharepoint.com/:o:/g/personal/info_baufirma-gebhard_it/EhpuyYnvt_ZHn8Q1Ox2DS3EBAm7QGra9uiV9B17VRB-fRQ?e=xakjXn
302 Found 590 B URL User Request GET HTTP/2 baufirmagebhard-my.sharepoint.com/:o:/g/personal/info_baufirma-gebhard_it/EhpuyYnvt_ZHn8Q1Ox2DS3EBAm7QGra9uiV9B17VRB-fRQ?e=xakjXn
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.sharepoint.com
FingerprintFF:6C:A7:8A:C5:1C:05:82:B7:7F:4B:52:12:7A:46:6A:1C:F9:F3:22
ValidityTue, 29 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (518), with CRLF line terminators
Hash d87e7921a031f823fef708c20a061577
9f4657d9ad2d74bfb7deff731d8637e953eef834
0f394683a46c333b9fe116843967a88bbc99fd7eeefbec4afb1a62156336d677
GET /:o:/g/personal/info_baufirma-gebhard_it/EhpuyYnvt_ZHn8Q1Ox2DS3EBAm7QGra9uiV9B17VRB-fRQ?e=xakjXn HTTP/1.1
Host: baufirmagebhard-my.sharepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private
content-length: 590
content-type: text/html; charset=utf-8
location: https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly
x-networkstatistics: 0,525568,0,28,10444349,0,525568
x-sharepointhealthscore: 3
x-aspnet-version: 4.0.30319
x-databoundary: EU
x-1dscollectorurl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://eu-mobile.events.data.microsoft.com/Collector/3.0
sprequestguid: 86d4b0a0-b07d-6000-813f-1bbe67c3aef3
request-id: 86d4b0a0-b07d-6000-813f-1bbe67c3aef3
ms-cv: oLDUhn2wAGCBPxu+Z8Ou8w.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=4c05ce4a-540c-43c8-aa4c-11a9846f4290&destinationEndpoint=Edge-Prod-OSL30r4A&frontEnd=AFD"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 133
spiislatency: 2
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.23619
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2EB6EF033EED4D30A5757957C677B397 Ref B: OSL30EDGE0320 Ref C: 2023-05-08T11:25:00Z
date: Mon, 08 May 2023 11:25:00 GMT
X-Firefox-Spdy: h2
baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
200 OK 46 kB URL User Request GET HTTP/2 baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.sharepoint.com
FingerprintFF:6C:A7:8A:C5:1C:05:82:B7:7F:4B:52:12:7A:46:6A:1C:F9:F3:22
ValidityTue, 29 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (49728), with CRLF line terminators
Hash 64630f3a5954e818adb84ed8d0754f30
77868009c83af1dafa1c94dd138f9ee22dac94c1
1ea34364bd1da72917ca339241cd2b44dedb1a3ada8fc83e5c28d3ed5e4d9e70
GET /personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e HTTP/1.1
Host: baufirmagebhard-my.sharepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: FedAuth=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 45668
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR", CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEyLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzM2N2EzNTBmOGQ2N2ZhZTA0ODQwZDJlODkwMjI5NzMwYWYwY2YzYjhmY2FhYjZkZmRiOWFjZmIzNjUyNzQ2NWUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMzY3YTM1MGY4ZDY3ZmFlMDQ4NDBkMmU4OTAyMjk3MzBhZjBjZjNiOGZjYWFiNmRmZGI5YWNmYjM2NTI3NDY1ZSwxMzMyODAxOTAwMDAwMDAwMDAsMCwxMzMyODEwNTEwMDM2MTI5NTQsMC4wLjAuMCwyNTgsNGMwNWNlNGEtNTQwYy00M2M4LWFhNGMtMTFhOTg0NmY0MjkwLCwsODZkNGIwYTAtYjA3ZC02MDAwLTgxM2YtMWJiZTY3YzNhZWYzLDg2ZDRiMGEwLWIwN2QtNjAwMC04MTNmLTFiYmU2N2MzYWVmMyw1bjJTZGxweVBFR0tNT1NaTHBQRWlRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCxmWk9jcldDME1sNzdLbXZ6MjB2ZzErVkNpcTRhdWpQd3JUV3NENW1TRW9YQVdiT3ZpbDNyTGtkTThkVUZESUltay9icisyelZ1V2FjckcxTmVLaU9rNjV5KzVwdmVhYWdwRVdSMVNDTjAyc0dodUQ1K1l1eGFmeWdYbjNLNXJPM2Z0US9Cc016UmFPQTVFTlVZcGhwTGN3SVJueW96bllRQkFVZCtvbVlIK20yMlFqZjdvYmM2ZTlVTFl1WDArMGE1SmpjTTY4bGNmWG1vQzNGUjR2czFuZUhEVGZyUkpPa0pRNXhGNjVRdEpBRkpacTlXdVhrUWRtSkYrRW50OU12Y2NWSWhNMUt2b01RTHFWazNadzZWZjgzVXh4SzVVN2t6REsvRVFqZ1lhdVhoOEcxcG1BTlJQK1hydkpIT2orRm1LV0VoY294OHBXQkdIU1hYY0hxNVE9PTwvU1A+; path=/; SameSite=None; secure; HttpOnly
x-networkstatistics: 0,525568,0,32,10444578,0,525568
x-sharepointhealthscore: 2
x-aspnet-version: 4.0.30319
x-databoundary: EU
x-1dscollectorurl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/
x-ariacollectorurl: https://eu-mobile.events.data.microsoft.com/Collector/3.0
sprequestguid: 86d4b0a0-f089-6000-7abf-5f3df1786944
request-id: 86d4b0a0-f089-6000-7abf-5f3df1786944
ms-cv: oLDUhonwAGB6v1898XhpRA.0
report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=4c05ce4a-540c-43c8-aa4c-11a9846f4290&destinationEndpoint=Edge-Prod-OSL30r4A&frontEnd=AFD"}]}
nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;
sprequestduration: 117
spiislatency: 1
x-powered-by: ASP.NET
microsoftsharepointteamservices: 16.0.0.23619
x-content-type-options: nosniff
x-ms-invokeapp: 1; RequireReadOnly
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 506CA12DF24B4D9E9E75C6603FC757DF Ref B: OSL30EDGE0320 Ref C: 2023-05-08T11:25:00Z
date: Mon, 08 May 2023 11:25:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js
200 OK 36 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 07363c7cf06545f4a58eb7d41acb4f3f
fdeba6be6fca1dac6c6f43980893b20d296644c0
4fa2592eddf2421b7017c058288ffa268ddf93756a1a3b20c1be73be08989e12
GET /officeonline/o/s/h4FA2592EDDF2421B_App_Scripts/onenote-boot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 35620
last-modified: Thu, 13 Apr 2023 05:23:16 GMT
x-ms-request-id: f1cdc962-801e-004f-02f8-778ec3000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d10373"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/require-9eb54831.js
200 OK 9.6 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/require-9eb54831.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (31038), with no line terminators
Hash 9eb54831a39d725782574c247d3d0206
bafdeaf62ed6f1bc258bde5653ab97fa47062d0b
8f1b49875cdc595d3ef040dab7b12af26195018f1876ac1f17a2443ce594b960
GET /files/odsp-web-prod_2023-04-21.008/require-9eb54831.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 9633
last-modified: Fri, 28 Apr 2023 07:00:57 GMT
x-ms-request-id: c80ecf82-f01e-0037-7927-7a2d3b000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-21.008
x-ms-meta-sourceid: 5DA92AC3B91CB279600B0644A84B620C7912261BB695E5485B0ECA8B0D4648B100
content-encoding: br
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:01 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d1037b"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/wachostwebpack/en-us/plt.resx-plt.js
200 OK 589 B URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/wachostwebpack/en-us/plt.resx-plt.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1695), with no line terminators
Hash a3caf1378753e7749ecd750338ca24ac
29e06aa22d1551ddf0fb64ef5e1e94baf0846144
5a3ce6d6d598d261ad1d7d75cae6c94c9259cc9ef58539f2a547baca257bfa57
GET /files/odsp-web-prod_2023-04-21.008/wachostwebpack/en-us/plt.resx-plt.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 589
last-modified: Fri, 28 Apr 2023 07:03:25 GMT
x-ms-request-id: d2fbed97-301e-0028-615d-7a9e3f000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-21.008
x-ms-meta-sourceid: DC83685E6F64CE9B46749312924B2507FE8DE30062F16A111AB400C183D266F400
content-encoding: br
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:01 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d10c63"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (52383), with no line terminators
Hash c8f80bb03b9e93226dbb566ca0df404c
7d0e6f533c17ffd0265f33ecea4546c6318f4df2
29c139c798e127a335aa7d960798c1a7fb41a455bbf89cdd56a540d957b794d4
GET /files/sp-client/odsp.aria/odsp.aria.lib-d92ebf3d.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 13430
content-encoding: gzip
last-modified: Fri, 07 Apr 2023 08:48:26 GMT
x-ms-request-id: 949bf70d-a01e-002a-30e2-6b2087000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-07.001
x-ms-meta-sourceid: D8186005210E49AB50C11AE3513BB5A0CE9E140E9ED8BD1CDFCEEAF54A83D3E800
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:01 GMT
vary: Accept-Encoding
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d10ca7"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-32072d62.js
200 OK 43 kB URL GET HTTP/2 res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-32072d62.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65455)
Hash f5cf851afd681efa56b5b0045008935e
9e1015d59b9d8c15a955a0278d2b04fb1b9987fc
4c701c85cfb31cc6505109be1b564b44e2775c37bf3543c769a4b5bdc90ba279
GET /files/sp-client/odsp.react/odsp.react.lib-32072d62.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 42629
content-encoding: gzip
last-modified: Fri, 10 Mar 2023 08:59:07 GMT
x-ms-request-id: 6b9811c5-c01e-0003-2bcc-551ef3000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-03-10.001
x-ms-meta-sourceid: 4A88142A6FA3972FB897026AA720C087B05E895FA7BF571DE96E6FB06B9111FA00
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:01 GMT
vary: Accept-Encoding
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d10d07"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/wachostwebpack/wachostwebpack.js
200 OK 225 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2023-04-21.008/wachostwebpack/wachostwebpack.js
IP
ASN #20940 Akamai International B.V.
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65464)
Size 225 kB (224827 bytes)
Hash 96db82e4c7a97faa167a756e32f1cb9b
70388c660ada57fe4e95796cddafb26a5ed74a1c
36ce5b77a9bfc95d47f1431ecaf6202342c2fca18cf2bbdea76d10abbb075a41
GET /files/odsp-web-prod_2023-04-21.008/wachostwebpack/wachostwebpack.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 224827
last-modified: Fri, 28 Apr 2023 07:03:37 GMT
x-ms-request-id: 1e505f76-901e-0021-6f5d-7adbec000000
x-ms-meta-sourcebuild: odsp-web-prod_2023-04-21.008
x-ms-meta-sourceid: E6B684FB83EC25852D91EA9428CADE055D597540FCB65A42F74A3894EC3D456800
content-encoding: br
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:01 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d10d59"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2038
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 40f1b9f4-c08e-4428-82a1-0aae5c63d749
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00020E37
x-officeversion: 16.0.16412.41013
x-officecluster: GEU9
access-control-allow-origin: https://baufirmagebhard-my.sharepoint.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8458642,17085210,17085216,17162522,17358857,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,50619726,51451613,51492170,51504083,51667010,306230939,306978834,508893266,509096994,509203553,509437535,509743362,510252435,512278607,512278610,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00020E37
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4A3E536F9C3A49D4B6972DD2D9C80CC0 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:01Z
date: Mon, 08 May 2023 11:25:00 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 118
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ccbad5d0-9011-480a-8122-d8b37dd25f9b
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BDB8
x-officeversion: 16.0.16412.41013
x-officecluster: GEU5
access-control-allow-origin: https://baufirmagebhard-my.sharepoint.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF0000BDB8
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: A8D541C3569E460B9A761C280C4E7642 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:01Z
date: Mon, 08 May 2023 11:25:00 GMT
content-length: 0
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
1.8 kB URL oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9f84d7d5b365cd5f8cb0a7fbb5e05785
61c2ae667b6fb60dc4c35f698a1ebbd762da9e53
c8fc11eb879c011e97ea931e994a1d4ca1e849629b34a4f735669b2c70b0174e
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Wed, 17 May 2023 17:28:22 GMT
Last-Modified: Sun, 07 May 2023 17:08:22 GMT
ETag: "c8fc11eb879c011e97ea931e994a1d4ca1e849629b34a4f735669b2c70b0174e"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 0B209F64F182456FA0F44F6A175969C3 Ref B: OSL30EDGE0113 Ref C: 2023-05-08T11:25:01Z
Date: Mon, 08 May 2023 11:25:00 GMT
c1-onenote-15.cdn.office.net/o/resources/1033/FavIcon_OneNote.ico
200 OK 7.9 kB URL GET HTTP/1.1 c1-onenote-15.cdn.office.net/o/resources/1033/FavIcon_OneNote.ico
IP
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.cdn.office.net
Fingerprint8B:5B:A6:99:B5:8C:C2:94:A5:05:BE:7C:E0:B8:6C:39:D1:35:9E:40
ValidityWed, 11 Jan 2023 22:35:52 GMT - Sat, 06 Jan 2024 22:35:52 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 7a7a4890caaa77025e1b33a6d6e474ee
dc735b99d9ef0c76b4a7aeae8baa4cbd9551ba77
9e1da5bf715135491519a188cad977db6cba414071e2407b69d63221379d8802
GET /o/resources/1033/FavIcon_OneNote.ico HTTP/1.1
Host: c1-onenote-15.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 7886
Content-Type: image/x-icon
Last-Modified: Mon, 17 Apr 2023 02:46:09 GMT
Accept-Ranges: bytes
ETag: "b3c1dcc3d670d91:0"
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-CorrelationId: be1edd8c-95da-43b6-8933-108ed3542fe7
X-UserSessionId: be1edd8c-95da-43b6-8933-108ed3542fe7
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-OfficeFE: AM4PEPF0000695A
X-OfficeVersion: 16.0.16412.41013
X-OfficeCluster: PNL1
X-OFFICEFD: AM4PEPF0000695A
X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
X-MSEdge-Features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
X-MSEdge-Ref: Ref A: 1A0F3C0EDEFD4C3CAB821C1F86569FC5 Ref B: AMS231032604039 Ref C: 2023-04-23T06:11:44Z
Cache-Control: public, max-age=983440, immutable
Date: Mon, 08 May 2023 11:25:01 GMT
Connection: keep-alive
res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
200 OK 4.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (27024), with CRLF line terminators
Hash a230e20feecbb758d7c13303a657eedd
f12606cce8600d9dfb5316610ee5177ba51b0ce9
816a0f42a2bf473213a47be1dde62215811d54af1151a1e9916dc215df6ec776
GET /officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 4702
content-type: text/css
last-modified: Wed, 26 Apr 2023 14:45:29 GMT
x-ms-request-id: f3d93211-001e-0023-41ec-7c6554000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d118c1"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
200 OK 112 kB URL POST HTTP/2 euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Size 112 kB (111590 bytes)
Hash 2f8b60d8432a91724eae1e4307bb81a9
7555d2486d2b62ecc9f0dd1a7bbe1db9517523aa
19a00da59939c0ddc865ab1d02b2a979c322a2ae601c9b85319398d12835fd70
POST /o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 5501
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure
x-correlationid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
origin-trial: AtAgCmjF9NSDe7WG5+zXddNhpryHIhWvHG5BxTAcMRn1V9oswBhX2RSXHeDxLcwXMB/NYHr3BAXOBJJY1ita2BAAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzAzOTgwODAwfQ==
origin-agent-cluster: ?1
x-officefe: PA1PEPF00009463
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
content-security-policy-report-only: font-src data: 'self' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com sway.com *.sway-cdn.com sway-cdn.com *.sharepointonline.com spoprod-a.akamaihd.net *.azureedge.net fs.microsoft.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net *.growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com *.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *.video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net *.msftauth.net *.officeapps.live.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net *.skype.com *.skypeassets.com *.msocdn.com js.live.net sway.com *.sway-cdn.com sway-cdn.com *.cdn.office.net res.cdn.office.net res-cn.cdn.partner.office365.cn res-dod.cdn.office.net res-gcch.cdn.office.net res-dev.cdn.officeppe.net res-2.cdn.office.net res-3.cdn.office.net res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-dod.cdn.office.net res-2-dod.cdn.office.net res-1-gcch.cdn.office.net res-2-gcch.cdn.office.net res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-v.cdn.office.net *; media-src *.skype.com *.skypeassets.com 'self' *; object-src 'self' *; child-src blob: * onenote:; worker-src blob: *; img-src * data: blob:; report-uri /o/reportcsp.ashx
document-policy: js-profiling
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=GEU4&FileSource=SharePointOnline"}]}
server-timing: prerender;dur=46,render;dur=0,total;dur=46
x-officefd: PA1PEPF00009463
x-wacfrontend: PA1PEPF00009463
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 65997F6119194D8DA95BFE7FEDBE68AD Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:01Z
date: Mon, 08 May 2023 11:25:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (54497)
Hash 12271b82a7dc347800e8763e723222e7
9ca96e0ebfe6eb16e98d938ae8eaf1f38e5e358e
5e4e81520a909af4df21f5ae0a468a94f43b28b36bdaa2ff627bb7304d8a4469
GET /officeonline/o/s/h5E4E81520A909AF4_App_Scripts/wacBootNew.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 13427
last-modified: Thu, 13 Apr 2023 05:23:34 GMT
x-ms-request-id: 9531de28-d01e-0042-7cf9-774617000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d118e5"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js
200 OK 40 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (49621)
Hash ac00af6ee54ad100cb6090612810038d
182e8f07efc3cad2f4e12aa312aba0625b0fe6c1
852f0636531eee15fa50a5615c70d378dd8893b5345a97c8d4328f7ae1270e0f
GET /officeonline/o/s/h852F0636531EEE15_App_Scripts/onenoteSyncNew.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 39561
last-modified: Thu, 13 Apr 2023 05:25:01 GMT
x-ms-request-id: ab76326f-901e-000e-03f8-77d627000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11956"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 5398e935b5536e5219298d527a3a5654
0e7cea73e9d31251b5b884ac934a125aa707905e
83ec8e5f8a3d30098514d5f3e0aa4905d1eba0518404d92d6f1a9d6adc087fcf
GET /officeonline/o/s/h83EC8E5F8A3D3009_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 27785
last-modified: Wed, 26 Apr 2023 14:40:55 GMT
x-ms-request-id: 1d24c0c0-301e-0065-21ec-7c51d3000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11a9a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js
200 OK 1.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6042), with no line terminators
Hash a55176635e66b80522e25e4ccca05a90
48aa2527313440869a4ce79e0c0d2329903c4c08
cba89239522795d55fcf43087637399562c8fb25cf3baadf59f488bb97bffd6d
GET /officeonline/o/s/hCBA89239522795D5_App_Scripts/Compat.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1373
last-modified: Wed, 26 Apr 2023 14:42:03 GMT
x-ms-request-id: d452ebfb-d01e-0020-1aed-7c8430000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11ae6"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e14c2adcf3492e9f7b4be98bcfb22019
f33c5c8af0caf6c4c537699c53e418d7e1de9c91
9a640f82b370299168f312acd352a6054165c5dd9a840aa123d11e25f1de4caf
GET /officeonline/o/s/h9A640F82B3702991_App_Scripts/1033/CommonIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31849
last-modified: Thu, 13 Apr 2023 05:29:01 GMT
x-ms-request-id: 1682bb31-201e-001b-5cf9-77c194000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11ae5"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js
200 OK 13 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ed943d5d2ac5cc29a757d17151b4aedf
977e91c43a356f0b4904b95257cbd2f40109fc57
63dd56f3589796d27e67470f04c09333a48667f1d66466b0fdec6c4782785005
GET /officeonline/o/s/h63DD56F3589796D2_App_Scripts/1033/Box4Intl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 12903
last-modified: Wed, 26 Apr 2023 14:46:09 GMT
x-ms-request-id: b5a5908f-b01e-006b-4fec-7c7863000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11b70"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
200 OK 5.0 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (29971), with no line terminators
Hash 644d85f3508f0a57fb7b9b7ef5dda3e5
4aa8d29b60b62ab601ee4b39c664d6f3b7ca1136
29db8ad8c3f0896786480626880dc28d2d26860119d93fe2919fdba45d3a0c5a
GET /officeonline/o/s/h29DB8AD8C3F08967_App_Scripts/1033/WoncaIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 4977
last-modified: Wed, 26 Apr 2023 14:40:47 GMT
x-ms-request-id: aca2e115-201e-001b-2eec-7cc194000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11be8"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js
200 OK 6.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (37189), with no line terminators
Hash bcc096c9f75fe7fbb5503a2a6f220c1b
0e4d4c2035ac45205fdba46992447b182ea5cf04
5930d7a90d3a61cc7b7f19824f3cf09ddbb2eb021fed7adeaff4f5008380abb0
GET /officeonline/o/s/h5930D7A90D3A61CC_App_Scripts/1033/OneNoteIntl.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6718
last-modified: Wed, 26 Apr 2023 14:44:10 GMT
x-ms-request-id: 8addf714-201e-0069-66ec-7cc6db000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11bec"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js
200 OK 3.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10912), with no line terminators
Hash 503dbbcc83eeb2b323238c330124f30e
3b6a7c8d5d2016c391cadf7176a4acaf6104c0fd
cf8e38af39f430eabdce3ce75277990346a5127907562ee3f30640aba82e9798
GET /officeonline/o/s/hCF8E38AF39F430EA_App_Scripts/jSanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 3414
last-modified: Wed, 26 Apr 2023 14:41:38 GMT
x-ms-request-id: 8ffb1fb0-901e-001e-24ec-7c134f000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11bef"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js
200 OK 892 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1354)
Size 892 kB (892250 bytes)
Hash 26efe2ce03577695908fa1d281e0a511
31dac4241fc7e30961abbb8e9486f9a259c3fab3
55e2f824b46dffc09aa36dd307e7a518c069c9f2b1adb8d7b910b456f2fb7d6d
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDs.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 892250
last-modified: Thu, 13 Apr 2023 05:24:31 GMT
x-ms-request-id: 55a432c6-401e-0050-18f8-773dc7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d11bed"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b912d09f-5034-470e-a2c6-cb8159829308
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E8E
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00035E8E
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4C16AE14EB904D80918BF71BD374E2C5 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:01Z
date: Mon, 08 May 2023 11:25:01 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.8 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 2796, version 4.30147\012- data
Hash f7a3882336d73698919566847d10ba2f
25e0f263ff150bcced6c00163b2a4934cc0dccf7
0a8049c5627a132d4c0be08579b2a33f7e8fd285a122795cabadabf08ddb6858
GET /officeonline/o/s/h0A8049C5627A132D_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2796
last-modified: Thu, 13 Apr 2023 05:26:38 GMT
x-ms-request-id: 31c48848-501e-0011-4ced-706523000000
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d122ca"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 3692
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 373
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:01 GMT
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":61,"Value":"https://res-1.cdn.office.net:443/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css","Type":"ResourceDownloadSuccess"},{"Index":2,"MsSinceStart":155,"Value":"Making GetCells Request","Type":"BootLogs"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 4277a6ea-5598-4c28-8d1f-fd1c6add0275
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E90
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00035E90
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 65490CAB33754085BD88351708F2CF11 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:02Z
date: Mon, 08 May 2023 11:25:01 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/OneNote.ashx
200 OK 13 kB URL POST HTTP/2 euc-onenote.officeapps.live.com/o/OneNote.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash a3195de11d3ac7a95a660b2049b7fea4
3681aaa30658ba6d44ab101d49c62249e327774b
ccf65e8c78d861e2eab64f4daeaf4ed4ce66ad2268afc267070f4e3913b91ebb
POST /o/OneNote.ashx HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
Content-Type: application/json; charset=utf-8
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-UserType: WOPI
X-WacCluster: GEU4
X-WacUserAgent: MSWACONSync
X-ServerSideRendering: RenderingNoImages
X-SessionStartDimensions: {"Application":"OneNote","Browser":"Firefox","BrowserMajorVersion":"111","BrowserVersion":"111.0","Host":"SharePoint Online","IsSynthetic":"False","Os":"Linux","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"SHARING.CLIENTREDIRECT","UserSessionApplicationMode":"Edit","WACDatacenter":"GEU4"}
X-Requested-With: XMLHttpRequest
Content-Length: 4120
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 12565
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: af4edc8b-a92c-42d0-b930-2b8f76d4bc42
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009470
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009470
x-wacfrontend: PA1PEPF00009470
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: tasmigration015,typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 23A3997B142C42D1A281F558CCFED256 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:01Z
date: Mon, 08 May 2023 11:25:01 GMT
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":682,"Value":"Get cells response received:200","Type":"BootLogs"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a76caf0c-6c55-4a1d-9ead-5b96fee2afad
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009470
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009470
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: tasmigration015,typeheadertest,afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 32093C4A5B224B4EA81B9C681C1AFAB3 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:02Z
date: Mon, 08 May 2023 11:25:01 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":4,"MsSinceStart":684,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":5,"MsSinceStart":690,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b688bfbd-52c6-4e70-9501-c9f9c2369883
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: AE5F4E721AFC40869CBCC45B40657E2A Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:02Z
date: Mon, 08 May 2023 11:25:01 GMT
content-length: 0
X-Firefox-Spdy: h2
onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509
0 B URL onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509 HTTP/1.1
Host: onenoteonlinesync.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://euc-onenote.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cb+Ox1DJSMcmAZR+1Od98w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-CorrelationId: 48c8733e-04cf-406b-bd8b-4d67e4371b81
X-UserSessionId: 48c8733e-04cf-406b-bd8b-4d67e4371b81
X-OfficeFE: OneNoteOnlineSyncServiceEngine_IN_8
X-OfficeVersion: 16.0.16501.40455
X-OfficeCluster: neu-002.onenoteonlinesync.onenote.com
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-AspNet-Version: 4.0.30319
Sec-WebSocket-Accept: st/8pgERND283cMSw7CKAV1cRbs=
Connection: Upgrade
X-Powered-By: ASP.NET
Date: Mon, 08 May 2023 11:25:01 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common.min.js
200 OK 119 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (43792)
Size 119 kB (119246 bytes)
Hash 183dd69b91ff5d9c37337cc03d5581d0
fad13e7511bc70844d4a17e08b923eca2a7323d9
8afc2ccf829901f961f193d7b2f8f1aee9c4c4697569a784d64120c06656540b
GET /officeonline/o/s/161641241013_App_Scripts/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 119246
last-modified: Thu, 13 Apr 2023 05:23:21 GMT
x-ms-request-id: ab7634e3-901e-000e-12f8-77d627000000
content-encoding: br
date: Mon, 08 May 2023 11:25:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545102.88d1450d"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js
200 OK 54 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36909)
Hash d658a1363abc4440b76ec8b349a79dc9
c853f3eac130b8bfa9f3bcd30a44cc289ba6b7c7
a7bd98be0d5823933f1a9308530daf9963037cc85c0ffee36dafad13916fff3c
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 54421
last-modified: Thu, 13 Apr 2023 05:23:37 GMT
x-ms-request-id: 6689f7a3-a01e-0067-73f8-77ef6b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545102.88d14538"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js
200 OK 26 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36909)
Hash 9057f63e08825b034034c7b1a673dbae
773bac9df965ff6ef4ecbca62ebca8484e44240a
1a9d59bed672fa868086c71975e2175dc45e0e7980ecb8bcf9589b657bd3c5e3
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-intl-mlr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25862
last-modified: Thu, 13 Apr 2023 05:25:01 GMT
x-ms-request-id: 8b89daf4-101e-004d-4df8-77307b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545102.88d14581"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":6,"MsSinceStart":1234,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: c3a90652-b82a-46e7-93fa-5257164203f1
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000946A
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF0000946A
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4CE72707FB0D4418873A86F00F6BBEB0 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:02Z
date: Mon, 08 May 2023 11:25:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChrome.min.js
200 OK 193 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 193 kB (193424 bytes)
Hash 393c92b1fccb95435cea8019c4fd5093
dcce483ff06fe0b616b02b01d6d325276018cbd3
7b85e3e5bbfa548b42e017ffe249e083467a47daab3b46d8d0d529189609e7c3
GET /officeonline/o/s/161641241013_App_Scripts/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 193424
last-modified: Thu, 13 Apr 2023 05:24:19 GMT
x-ms-request-id: 3d06a0c2-001e-0023-4ef8-776554000000
content-encoding: br
date: Mon, 08 May 2023 11:25:02 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545102.88d146be"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/progress.gif
200 OK 695 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 24 x 24\012- data
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/o/s/161641241013_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 695
content-type: image/gif
last-modified: Thu, 13 Apr 2023 05:24:02 GMT
x-ms-request-id: 71b711a7-f01e-0055-27e5-6def1c000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d149d3"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js
200 OK 6.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (41569), with no line terminators
Hash 345bff8d2e34511694d9d12a008f5f5d
b3f35302052c26c285c43b935bce972904e62e28
dd4039f8afac6fd76b462c4fd4f90374b18db762719108491ac2e365196d71ac
GET /officeonline/o/s/161641241013_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6113
last-modified: Thu, 13 Apr 2023 05:24:19 GMT
x-ms-request-id: 952dc012-d01e-0042-80f8-774617000000
content-encoding: br
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d149e6"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box42.png
200 OK 6.3 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box42.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /officeonline/o/s/161641241013_resources/1033/m2/box42.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6336
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:29:17 GMT
x-ms-request-id: 2a83c0e3-401e-0050-12e5-6d3dc7000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d14a0f"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js
200 OK 1.7 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7373), with no line terminators
Hash 19998b35a2604e35a613a8b3ffcccafb
bed6ce8b4026b23d095d8d61da8bf2e79b008d4f
6e2826daea6ca98ad26c31b8acb4c4c439857d7575fa9aa704cc7c16662ab0ec
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-navpane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1680
last-modified: Thu, 13 Apr 2023 05:24:18 GMT
x-ms-request-id: ab78f5b1-901e-000e-49f8-77d627000000
content-encoding: br
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d14a34"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/one.png
200 OK 51 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/one.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced\012- data
Hash eca50172a6583b16e553e9917fb710fb
2fd7fb2ff5c10e17e9066ce6bd2393e1f6b93cc0
fff5919a2cbaceae0528522b6c73e4f1d549ca8ee13c680b50ed377dfd2b61f0
GET /officeonline/o/s/161641241013_resources/1033/m2/one.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 51120
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:29:36 GMT
x-ms-request-id: 8d321aa5-601e-001a-77e5-6d9e48000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d150c7"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff
404 Not Found 215 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 55fcad6b49db87219da282b4ef702b61
907915f51d2ebefd028acde7d122103bdd431894
eaf47bb19cdde7a82c0f63310df582446f854727ec4c245dc4e73787402e58de
GET /officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 215
x-ms-request-id: 62f08d17-901e-004e-089f-81e449000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d149e5"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box43.png
200 OK 1.9 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/m2/box43.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /officeonline/o/s/161641241013_resources/1033/m2/box43.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1922
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:30:18 GMT
x-ms-request-id: 1e326bc0-701e-0039-77e5-6d048b000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d15909"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/navigation.min.js
200 OK 80 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/navigation.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 8bb12f181b5f5fc352964dcf7024921d
e7029f9f1846dc285ef0f981d5cf896ef5c31e41
9c7e960a6ea23f849b5add9f4d887cf2fe73e0fa4d920f2a8ef58ead3d62cb6a
GET /officeonline/o/s/161641241013_App_Scripts/navigation.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 80350
last-modified: Thu, 13 Apr 2023 05:23:33 GMT
x-ms-request-id: c07cd489-501e-005c-1af8-77aacf000000
content-encoding: br
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d1590f"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":7,"MsSinceStart":1769,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f1103186-5fa8-48d7-a577-8dd7a7df5aa4
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009469
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009469
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9FAD20BDA4754C25B7A986DDD160A243 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:03Z
date: Mon, 08 May 2023 11:25:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
200 OK 109 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65443)
Size 109 kB (108830 bytes)
Hash 92054b9708967e2e5044ef045392c1ac
ba046c661d35cb467670556c72a9df0d36ba4943
dfbb1bd22a76d33a16825d0b13052795acf3d5b1a1c25e00189eac019a80848a
GET /officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 108830
last-modified: Thu, 13 Apr 2023 05:29:30 GMT
x-ms-request-id: 8b89bdab-101e-004d-4df8-77307b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d15914"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 125
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: e32082ca-11bd-4d92-9196-b26ae590d713
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0000F2C5
x-officeversion: 16.0.16412.41013
x-officecluster: GEU8
access-control-allow-origin: https://baufirmagebhard-my.sharepoint.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0000F2C5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: A839738698B642B6AD65E3BE8A64B6C0 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:03Z
date: Mon, 08 May 2023 11:25:02 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/null&DataUrlEnabled=true
302 Found 182 B URL GET HTTP/2 euc-onenote.officeapps.live.com/o/null&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f29c7f86f0b88e59225b9445c99bacd4
d8a0cba034f4e64e764e311ee5a9689d855a2a93
a57dcdb357d4306cc833fdf2f4f418a54a68157fd6001435ecea901e50ec50d2
GET /o/null&DataUrlEnabled=true HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 182
content-type: text/html; charset=utf-8
location: /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
set-cookie:
x-officefd: PA1PEPF00009463
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 4814F9897C694243B1586F771140703E Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:03Z
date: Mon, 08 May 2023 11:25:02 GMT
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4330
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 89ba295b-a211-4a4c-847d-ff7d82e016c0
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM1PEPF000094C7
x-officeversion: 16.0.16412.41013
x-officecluster: GEU2
access-control-allow-origin: https://baufirmagebhard-my.sharepoint.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8458642,17085210,17085216,17162522,17358857,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,50619726,51451613,51492170,51504083,51667010,306230939,306978834,508893266,509096994,509203553,509437535,509743362,510252435,512278607,512278610,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF000094C7
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: CBD15B2DEB584D5995630C56494FA4E4 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:03Z
date: Mon, 08 May 2023 11:25:02 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 10764
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 179
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:03 GMT
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf
404 Not Found 215 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 9165d735bd1465f17e15e68d91eb0b39
e0c6b9286c63ae792923da8182f33f47e97794e3
edb4b6e4b99204f7f4c8da69a82a42f99d3e57a7f4199deee80560146bc0ee0e
GET /officeonline/o/s/h2370440C296E813C_resources/1033/segoeui.ttf HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 215
x-ms-request-id: 06e5bd60-101e-0040-539f-81cdf9000000
date: Mon, 08 May 2023 11:25:03 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d15ad6"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/x-font-ttf
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0\012- data
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Wed, 14 Dec 2022 21:53:31 GMT
x-ms-request-id: 9a48d77e-401e-0032-4a49-14ffe0000000
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:03 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d1655a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
200 OK 36 kB URL GET HTTP/2 res-1.cdn.office.net/files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0\012- data
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20221209.001/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Wed, 14 Dec 2022 21:53:29 GMT
x-ms-request-id: 564e9bd6-a01e-0015-0d49-14e824000000
cache-control: public, max-age=630720000
date: Mon, 08 May 2023 11:25:03 GMT
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545103.88d16563"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common50.min.js
200 OK 245 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 245 kB (244968 bytes)
Hash 84d433f9cee5ce93bab6ce15942f349d
2dd1903c123687a64b662ec17d2628bc13e55387
9bc14ce1784b12876f2f9cff93d30b987530fbd6cfa4240adcfeb6e074f43f0d
GET /officeonline/o/s/161641241013_App_Scripts/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 244968
last-modified: Thu, 13 Apr 2023 05:24:28 GMT
x-ms-request-id: f1cdb840-801e-004f-14f8-778ec3000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d17557"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js
200 OK 95 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Hash b36bf186a062b6de0ce838ed8255791a
595774bb9b67d082ddc003424b94f1eb2e7606eb
d39de3d79f04a8dfb8a89aae5ce89e7a4a0753b6f1234a8c7d051feb88de781b
GET /officeonline/o/s/161641241013_App_Scripts/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 94951
last-modified: Thu, 13 Apr 2023 05:24:14 GMT
x-ms-request-id: 55a438de-401e-0050-25f8-773dc7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d1762b"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js
200 OK 130 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 130 kB (130121 bytes)
Hash 878c2e52ef3615d20b70f8f021a65680
5bb2d24c5d18f64d89975aa56d54a739e6463bfb
38a0a83b4c66b204e6971bbdb50451c39f1acd0f00d7507aeb81c505103b2087
GET /officeonline/o/s/161641241013_App_Scripts/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 130121
last-modified: Thu, 13 Apr 2023 05:23:40 GMT
x-ms-request-id: ab763bdb-901e-000e-6ff8-77d627000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d1762a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
200 OK 51 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ecbf3b46242f3f0e8d9e6a61ebff525
3799b14c4e063a93dac8c6760a966a6d970a8544
7a306c649ce6eb26011cb2b47dbab71d66bc6f01c7a4870a3b3b7726aa78ffe1
GET /officeonline/o/s/161641241013_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 51354
last-modified: Thu, 13 Apr 2023 05:23:19 GMT
x-ms-request-id: 574c5852-d01e-0052-57f8-77837f000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d17c2a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js
200 OK 62 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36667)
Hash d332761b25c06f6f73613bc1a4a8cfa2
5e078128afddf2c0bf6f0db55e510b91fbb18ae7
79744dbebc39c64e4a2be9023a33433a8370071ad3b2e638760faf2abd857d99
GET /officeonline/o/s/161641241013_App_Scripts/appIconsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 62430
last-modified: Thu, 13 Apr 2023 05:23:54 GMT
x-ms-request-id: 8b89c0ca-101e-004d-48f8-77307b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d17c33"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 16559
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1f6a9659-1774-4697-b6ff-e159d2fcb14a
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009463
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009463
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 34C79E4654DC4FE89A8119AAE8DF7A52 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:04Z
date: Mon, 08 May 2023 11:25:03 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=af7114704a204580909f08c904c5ac6f-6f6f4c13-294c-4a00-8e55-71180ed7d627-7044 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 3250
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 80
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:03 GMT
res-1.cdn.office.net/officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
200 OK 1.3 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4174)
Hash 4e3234d2a1c50a00d46207ab0e255f2c
9ed4b04beffa09f62cf254f56a5120a97954732e
83a01e6c86b10a1b529cd1938a92f0613c4722bd3a86be2cff4c38fae8fcdd25
GET /officeonline/o/s/h83A01E6C86B10A1B_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1336
last-modified: Wed, 26 Apr 2023 14:42:21 GMT
x-ms-request-id: 22a0f2f4-c01e-004e-12ec-7cd11f000000
content-encoding: br
date: Mon, 08 May 2023 11:25:04 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545104.88d187d4"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
200 OK 2.1 kB URL GET HTTP/2 euc-onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (3958), with CRLF line terminators
Hash 72104170e9457c995a120bb3e78382f5
463d8efdf5e97345cd5ed7d666739c95e33f2b74
94115b87be04c1761ed7b39058b4b0799cb4afa42e86cfc00f812a9cb3913001
GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 2070
content-type: text/html
content-encoding: gzip
last-modified: Fri, 14 Apr 2023 18:52:49 GMT
accept-ranges: bytes
etag: "8096fd4e26fd91:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a8bc823b-657c-4d70-8e87-3e8ed75e96ba
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009470
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-officefd: PA1PEPF00009470
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: B927735E41714D818B27218E182110D4 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:04Z
date: Mon, 08 May 2023 11:25:04 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js
200 OK 46 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash 12eaabc47ce97e1e94fb3160d68fe7a7
63d2e764b856b5273dc1dd7ed8f4907b83ebc2f3
95168c4a784528f0014207fa1017a96481bcd579b8124f43566fd96da49ce059
GET /officeonline/o/s/161641241013_App_Scripts/oreonavpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 46125
last-modified: Thu, 13 Apr 2023 05:24:24 GMT
x-ms-request-id: 55a43a95-401e-0050-31f8-773dc7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1911a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js
200 OK 14 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (61839)
Hash efe6061662460bfe701949f78c09364a
9a5e44003b4c1da7eab1e5d90d373350a5067e50
49523496ac3fe04d9d9182c080bc0aa50e8cf4b9b27f9ec5a822ff09be8b329f
GET /officeonline/o/s/161641241013_App_Scripts/oreolazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 14173
last-modified: Thu, 13 Apr 2023 05:24:11 GMT
x-ms-request-id: 8b89c2e4-101e-004d-43f8-77307b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1911e"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js
200 OK 473 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3657)
Size 473 kB (473378 bytes)
Hash d851af07037d153337d97b547b9f1781
0a441d81c6c378875fa52cb0911a098efd563f93
ca965a9b262073ef981c98c9675593161dbead1e5d4fe7ef511d7a841a70ba40
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 473378
last-modified: Thu, 13 Apr 2023 05:24:13 GMT
x-ms-request-id: c07cd677-501e-005c-62f8-77aacf000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d195db"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
500 Internal Server Error 2.8 kB URL GET HTTP/2 euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash 4fc024daffe1bcb68b29a058c0ddbc6b
4a8f9da214874ff636d4bd249ebfd5a78244dd66
c76ee76115408f7dd2a8d4730936cc1b6312aef2254f3236aeb0b5f448de65a2
GET /o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
OrgIdSiteUrl: https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 10eb06cf-722a-41d3-824a-28a26bef3cc7
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6DFD6ADF61694A49B2267A664868697D Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:05Z
date: Mon, 08 May 2023 11:25:04 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js
200 OK 1.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2949)
Hash 90a40515fb4997997d32472503fe30be
e4b8c317090a0fb690e4ca41c593fb05e80f082b
1a1627f8689b66d82234f7b184ce2b5f0f40aced00f7108214ab748d4f6b5983
GET /officeonline/o/s/161641241013_App_Scripts/oreonotebookpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1076
last-modified: Thu, 13 Apr 2023 05:24:45 GMT
x-ms-request-id: 01141a12-201e-0069-53f8-77c6db000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d199e0"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
www.microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff2
200 OK 34 kB URL GET HTTP/2 www.microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff2
IP
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectwww.microsoft.com
Fingerprint2D:6E:2A:E5:B3:6F:22:07:6A:19:7D:50:00:9D:EE:66:39:6A:A9:9C
ValidityTue, 04 Oct 2022 23:23:11 GMT - Fri, 29 Sep 2023 23:23:11 GMT
File type Web Open Font Format (Version 2), TrueType, length 34052, version 0.0\012- data
Hash 36397a3bc139c6e9f81d383f060f080a
3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
GET /fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1
Host: www.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 34052
content-type: font/woff2
last-modified: Fri, 10 Jan 2020 19:09:43 GMT
accept-ranges: bytes
etag: "588d483e9c7d51:0"
cache-control: public, max-age=1037095
date: Mon, 08 May 2023 11:25:05 GMT
access-control-allow-origin: https://euc-onenote.officeapps.live.com
tls_version: tls1.3
strict-transport-security: max-age=31536000
ms-cv: CASMicrosoftCV88d19895.0
ms-cv-esi: CASMicrosoftCV88d19895.0
x-rtag: RT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js
200 OK 15 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (59298)
Hash 41f9da9bcbed0530d26587a28987ff90
6597df95f0e9d67418bc84e01564b902bc07df96
aa5632b2e7fe7be268c742fb5f3ce7c9cb0269d9b2435fa13959bd4af9fe95f3
GET /officeonline/o/s/161641241013_App_Scripts/oreosearchpane.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 15423
last-modified: Thu, 13 Apr 2023 05:23:31 GMT
x-ms-request-id: 3d06b011-001e-0023-6bf8-776554000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d199fb"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (49282)
Hash d273ae25b98e69bffa58d8d41530ee18
23e1a8dd4fbd83e74dfd3a015adefaba8ce39b46
c4002ee63f6681d93453eb41016d5dcc7deb9f3c07aaacfdd79bb76abc1ae58d
GET /officeonline/o/s/161641241013_App_Scripts/otelNext.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 31861
last-modified: Thu, 13 Apr 2023 05:23:33 GMT
x-ms-request-id: 3d06dc6a-001e-0023-2ff8-776554000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d19cca"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 9116
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 79
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:04 GMT
spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
200 OK 152 kB URL GET HTTP/2 spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 151924, version 0.0\012- data
Size 152 kB (151924 bytes)
Hash e80ff72e03e780056cfdbd85c63404ce
c450a1a6233f0fbc6dbffb7fee251e378f64ef32
05828d625dcb5781d0a3cc67a2429ced535fdf848b8b8075d49751eb5b30c7af
GET /files/fabric/assets/icons/fabricmdl2icons.woff HTTP/1.1
Host: spoprod-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151924
content-type: font/woff
content-md5: 6A/3LgPngAVs/b2FxjQEzg==
last-modified: Fri, 11 May 2018 22:37:14 GMT
etag: 0x8D5B78FBE15F296
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0f112320-c01e-00ca-5b52-2c8e1f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
unused62: 8096267
cache-control: public, max-age=12394499
date: Mon, 08 May 2023 11:25:05 GMT
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
timing-allow-origin: *
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 13177
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9ae409f4-d83c-4a81-a91b-430fa492c88e
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E90
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00035E90
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 3F8EBF74B8E042DFABF8E9F4BC9D7E87 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:05Z
date: Mon, 08 May 2023 11:25:04 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 0 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://euc-onenote.officeapps.live.com/
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Date: Mon, 08 May 2023 11:25:04 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
200 OK 94 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c7fa6b692a0839b6c99ac8ba07f74b45
af7024e777dae39fcdf0139e95ababd5430fe4cd
3385edfcbb98fb271a7ab82ded6914de81a0cebf065baab6408b2fcc1bd3c648
GET /officeonline/o/s/161641241013_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 94232
last-modified: Thu, 13 Apr 2023 05:24:44 GMT
x-ms-request-id: ac30e7dc-001e-0051-6df8-77621b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1b1bc"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
200 OK 34 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (61584), with CRLF line terminators
Hash 0d4748118dd63f42e80beef0aa95ea11
05ac23356dd9bd532be9e81c201943aedc918a91
b0a2b1973deff290d06e6979672bc24778c7262928e6a63fdd0dcb65bb66fe99
GET /officeonline/o/s/161641241013_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 33885
last-modified: Thu, 13 Apr 2023 05:24:06 GMT
x-ms-request-id: 55a43b51-401e-0050-50f8-773dc7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1b1c2"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a33ab50bcc3a87bb64afdd6011f46ed8
1f320b0879bf3de96690b6198716f1a641895d77
4d759e2181902905e5ff0b704fba4d6baba35fa16221f612c3416d2d54a38b9a
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,86258c80efed47d9b34bf77fc663b381-af82a060-b49f-448b-baf0-956ba7709592-7634
upload-time: 1683545105508
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 9561
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 292
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:04 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js
200 OK 122 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (64817)
Size 122 kB (122014 bytes)
Hash c4da178f7b6b21f9d3b4fbd44ec6d25c
c6a99f96fc5cea66206660dc36d816bcf3869285
f8ca3665a2b7e11fce291905059d17d8b8282e24fe0f9e25fa09857bad020f9d
GET /officeonline/o/s/161641241013_App_Scripts/osfruntime_ono.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 122014
last-modified: Thu, 13 Apr 2023 05:24:22 GMT
x-ms-request-id: 162543ff-701e-0006-56f8-77cc28000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1b216"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js
200 OK 17 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 9cfefb2d46d6102dac2a24c606f47fea
076b63f4f46ce28648201e2507bbc67fb4f990c5
43c5939cb732d8aa2d20fce97f359f46b7c3b937e60ed576b752ae0a2e73314f
GET /officeonline/o/s/161641241013_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 16640
last-modified: Thu, 13 Apr 2023 05:23:24 GMT
x-ms-request-id: 01141bfe-201e-0069-7af8-77c6db000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d1b225"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
200 OK 6.0 kB URL GET HTTP/2 euc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Hash d9604cc18f364a6ade707b7faaec642c
f38f0b94764184d4373886fda1ca87d352bfce5a
f282423f48f12f56419363384f3b10002c8d3d106bc1ac8ff721602aa2b2fd9b
GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5979
content-type: application/javascript
content-encoding: gzip
last-modified: Sat, 15 Apr 2023 03:43:16 GMT
accept-ranges: bytes
etag: "0625c694c6fd91:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6175bb0e-0f5b-47c3-84aa-895129d9ca68
x-usersessionid: 6175bb0e-0f5b-47c3-84aa-895129d9ca68
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00003C91
x-officeversion: 16.0.16412.41013
x-officecluster: GEU10
x-officefd: GVX0EPF00003C91
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 2D6058DE029C47F98D75C88AC36CCC07 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:05Z
date: Mon, 08 May 2023 11:25:05 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 5.1 kB URL GET HTTP/2 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (25305), with no line terminators
Hash 92a6b624a56c277304e7e8ce8393036b
8f8e9e050f8a93cfe32f85acee9e5adbef6b7bc1
3bfa650929af8921ef3737757f4f01fe2f55fc368c1b1316a50c442a0e489c69
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: c91f944a-57ef-4cde-bb9e-aea8a2c08ac4
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Mon, 08 May 2023 11:25:06 GMT
content-length: 5129
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545106.88d1bb96"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/afhs/CloudPolicySettings.ashx
200 OK 218 B URL GET HTTP/2 euc-onenote.officeapps.live.com/afhs/CloudPolicySettings.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (371), with no line terminators
Hash a5e7e42d75f730e9fbd1145481e82154
a654df4f65781e8debf969023970ced28caca61a
c5507dcf8f0c3081c7adc25a0748dd69659d40def4ef3761a448dc8b01b6b1d0
GET /afhs/CloudPolicySettings.ashx HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
x-UserDataSignature: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik84MTBxbUpnWGE4TGhIbHVISmNxMlJSYlprYyJ9.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.qUUXfQu_0gE98X5mRbkGxSo2mdcxaqA42IWcxrMGW1jNUEhlfxsiLgRhKC37I4gDt5bztcFLKrUkDB5Vr2fRlcCWjQHUNaeNhXKkVdna-GO7HbLqNFNLIMxIL9Wi68Hni6XXkLron4qeWOg20g91_ExQ7hlYIE4rT1d8YV8lyq9zH5IldCZJatyr_bFJ9mfIAa5DonhDlbElCn2I7N8I3T-Yy0LgZk812dHrkj74j4vBYLgTe43FXP6Z2mEgt5LWfumZuw5ck9RNA9t_k7B5nBY_nZoYdDq0LjxTqNJ2ZPC82ibAIkXO-IuI6ruO25rn7LKrxYzXuYNjwxCXZ-Ps6A
x-LicensingIsEnabled: true
x-CacheIsEnabled: false
x-OcpsIsEnabled: true
x-LicensingAADIdIsEnabled: false
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 218
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085;Path=/;Domain=euc-onenote.officeapps.live.com; samesite=none; secure
x-correlationid: 611b6719-4c9d-483b-812e-b2ceeda12847
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
x-officefe: PA1PEPF00076F2C
x-officeversion: 16.0.16501.41002
x-officecluster: GEU4
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
checkin-interval: 1440
x-officefd: PA1PEPF0008F90F
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 9F0189E9A6BE42FF8D340262D5960912 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:05Z
date: Mon, 08 May 2023 11:25:05 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683545105442&time-delta-to-apply-millis=use-collector-delta&w=0
200 OK 153 B URL POST HTTP/1.1 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683545105442&time-delta-to-apply-millis=use-collector-delta&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint56:1C:80:C1:AA:37:77:D8:FC:EC:2A:BD:73:2B:6C:84:D4:D0:72:27
ValidityWed, 08 Mar 2023 09:02:43 GMT - Sat, 02 Mar 2024 09:02:43 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 422b0b99c60e43a0c6dcf3cbb3f4bfa5
d6759333966079a8d4acf0256d20ac1e64d84efb
30ccf13e7bd2229f776a36615295bf390a46552b580500d2e0219d92ec614a9e
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.3.4&apikey=5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822&upload-time=1683545105442&time-delta-to-apply-millis=use-collector-delta&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 611
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 153
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; Domain=.microsoft.com; Expires=Tue, 07 May 2024 11:25:06 GMT; Path=/;Secure; SameSite=None
MS0=9ab2292a6a74402dbdf0398dba8eceb2; Domain=.microsoft.com; Expires=Mon, 08 May 2023 11:55:06 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 700
Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://baufirmagebhard-my.sharepoint.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:06 GMT
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 3506
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 234
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:06 GMT
euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
500 Internal Server Error 35 kB URL GET HTTP/2 euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash bfafbeea141ac1936f757117ee0848cb
b6646d5ab322f7432d4771b29ac0bf98581b6af7
73c1449923bcec566f3014898c30ee74bbca228d466eece16c3cba075f5383d6
GET /o/OneNoteS2SHandler.ashx?action=eduproperties¬ebookid=1-89C96E1A-B7EF-47F6-9FC4-353B1D834B71&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%2EeyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
OrgIdSiteUrl: https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 26b7351c-af03-4352-963c-9c8678395c21
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_excelslice_control,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6F6E5970A0E24EE79F01A271DCE61332 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:05Z
date: Mon, 08 May 2023 11:25:04 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 41bdabd816d2c4ec9de35b1fefb49481
2a408715541a011e49c8bf82ca41bc66fc1e0a6e
c6b65a2517e5f15ba2d9288646452d02d023150ec41ebccf07872bf44bf22603
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Apr 2023 05:34:39 GMT
x-ms-request-id: d938cbbf-a01e-0005-5de2-6d2d4c000000
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 08 May 2023 11:25:07 GMT
content-length: 4441
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545107.88d1ff89"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js
200 OK 361 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (697)
Size 361 kB (360568 bytes)
Hash 348efd098d0c6af6a494bda46dd66626
0b58d875fc2652306da7f2b5cde96fbdc65bce3d
6f5a78d98cea1ef79eedaa38dc69d2a321aba0d4c58eaf4375bf5626dca0220f
GET /officeonline/o/s/h55E2F824B46DFFC0_App_Scripts/OneNoteDS.box4.dll2.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 360568
last-modified: Thu, 13 Apr 2023 05:23:28 GMT
x-ms-request-id: 574c234e-d01e-0052-0ff8-77837f000000
content-encoding: br
date: Mon, 08 May 2023 11:25:08 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545108.88d2221a"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 12002
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: cca871f3-4de4-40cd-ac86-46f6d096f722
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E8E
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00035E8E
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 79A4010D8107425A91F3AAB10D64ADB9 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:08Z
date: Mon, 08 May 2023 11:25:08 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
200 OK 78 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65312), with no line terminators
Hash 7e1623baf5c405d6fdb501feccefef2b
7e65c33fd0ee5eb1ce275c980b68050714aa19fd
90208ed29dceaf2ef6221fa41d42119f982ad7329ba7f7036fe587d8d4e79efd
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 78118
last-modified: Thu, 13 Apr 2023 05:29:49 GMT
x-ms-request-id: 8b89670e-101e-004d-71f8-77307b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:08 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545108.88d22506"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
200 OK 2.0 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7543), with no line terminators
Hash 4c51b6102ec75941c163a79f87e45536
78184c3674390bcd7fe9a306909d276a94ae7c96
86fc2aaa509a1232bf93a6caea92aea0bfc60e857291e7a57576d3427ed24c81
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2024
last-modified: Thu, 13 Apr 2023 05:29:56 GMT
x-ms-request-id: 915f542e-a01e-0058-54fa-7727c8000000
content-encoding: br
date: Mon, 08 May 2023 11:25:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545109.88d22967"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 7634
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 697137db-dfac-437a-82d9-715ded6e30c0
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009470
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009470
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F1DC022067E5441E80A628DD804F4046 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:09Z
date: Mon, 08 May 2023 11:25:08 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js
200 OK 781 B URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1837)
Hash 75d24f9e7317f73506843d0ab707294c
3e1b1b327c7e4be56b1c68c657ad1ce97bedd89f
55c7d1500ea08e99ba26123bf78596590064ea405087e3b91a084a49160a204e
GET /officeonline/o/s/161641241013_App_Scripts/uiFabricLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 781
last-modified: Thu, 13 Apr 2023 05:23:25 GMT
x-ms-request-id: 01141d4a-201e-0069-0df8-77c6db000000
content-encoding: br
date: Mon, 08 May 2023 11:25:09 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545109.88d24161"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2268d13420e0aa0f9b66cb5d019739a7
662a004fc2f4b8d7aac6e1a6edbe0c591e131e5a
58eebbad8ea42cacd6321e80025b549352a7a2daf27795459c8d8f01164178ce
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063
upload-time: 1683545109085
time-delta-to-apply-millis: 292
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 5374
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; MS0=9ab2292a6a74402dbdf0398dba8eceb2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 685
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:08 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
200 OK 48 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (44416)
Hash e0ced31b96d873ed2977699a8a843588
43aa37fb576a568a8857f3992a59fe80272dd91f
ce54c0435f6bb41736fdf5a11a1c2dc450ad32d5277672f42262ef8e3029713d
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 47615
last-modified: Thu, 13 Apr 2023 05:30:05 GMT
x-ms-request-id: 574c26c5-d01e-0052-3bf8-77837f000000
content-encoding: br
date: Mon, 08 May 2023 11:25:10 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545110.88d2595b"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 13044
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 3ab30333-fd4b-4fbb-9f01-c7fdc19dd34d
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM1PEPF00000695
x-officeversion: 16.0.16412.41013
x-officecluster: GEU2
access-control-allow-origin: https://euc-onenote.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM1PEPF00000695
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6B453EA0088E480B80AA5A7BFB59B6A5 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:10Z
date: Mon, 08 May 2023 11:25:09 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
200 OK 32 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (21309)
Hash 79c4e59ed15f08912deae30553e28aa0
a7e6cd6709440c648d57b6af2a7b97eb9a00172b
6595729f6b1ffd5a1824115388ef9dc7b70eef861f015c542ecbd000fe86ca62
GET /officeonline/o/s/161641241013_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 32250
last-modified: Thu, 13 Apr 2023 05:29:48 GMT
x-ms-request-id: 5eeeb242-b01e-0036-6ff8-7772e7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:11 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d26df4"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js
200 OK 2.2 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (11522), with no line terminators
Hash 66d9f61d5da4b54f10c3b7a90382e04f
e04c13019ea896dc73d493a5a11a4e2ba945015f
48a36b347a58f7fb511ab157dbd2ad10a8ef94f1a9a858b43b811befa89250ef
GET /officeonline/o/s/161641241013_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2197
last-modified: Thu, 13 Apr 2023 05:24:04 GMT
x-ms-request-id: 6c1a43f5-c01e-003c-74f8-77d650000000
content-encoding: br
date: Mon, 08 May 2023 11:25:11 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d2739c"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml
200 OK 14 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 1bf11fc2dbdb5c48b7d60f5005583417
df52b131f6b151e674204cba77082efaefbc3f8c
172e218e70cc419328b7aab580615da2a562e1508eac9ac3014c52c51f2f50ec
GET /officeonline/o/s/161641241013_resources/1033/Meetings_manifest.xml HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/xml
last-modified: Thu, 13 Apr 2023 05:24:11 GMT
x-ms-request-id: 0ed16f9e-901e-0021-03e2-6ddbec000000
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 08 May 2023 11:25:11 GMT
content-length: 14502
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d27560"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
403 Forbidden 1.2 kB URL GET HTTP/2 euc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ab64c4d3-54db-40b5-b654-b5a3c1c5f645
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E90
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-officefd: PA1PEPF00035E90
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3
x-msedge-ref: Ref A: A09D6EA803774D7DBF74F1D6FA13E642 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:11Z
date: Mon, 08 May 2023 11:25:10 GMT
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/reportcsp.ashx
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/reportcsp.ashx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/reportcsp.ashx HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 5389
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: a45491ea-7725-40ed-9161-08aaf5cacfd4
x-usersessionid: a45491ea-7725-40ed-9161-08aaf5cacfd4
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00003C58
x-officeversion: 16.0.16412.41013
x-officecluster: GEU10
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00003C58
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: CB247C2C4FAF414DAAE451E5F8F040CC Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:11Z
date: Mon, 08 May 2023 11:25:10 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: true
X-bULS-SuppressionETag: 023CF1574F186ADD70BE02436D9100AAB57EC129
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ
X-AccessTokenTtl: 1683581100509
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 57634
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5cf3b443-e108-4370-ad19-b0b51bc80dbc
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: A56A7C518D7A43BE94A124663A40225A Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:11Z
date: Mon, 08 May 2023 11:25:10 GMT
content-length: 0
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683545110935
302 Found 0 B URL GET HTTP/2 storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683545110935
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
FingerprintE5:81:EB:A6:56:EF:C9:97:67:2C:BA:A0:14:C9:B6:32:2D:FC:0E:5B
ValidityMon, 17 Apr 2023 21:56:35 GMT - Thu, 11 Apr 2024 21:56:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1683545110935 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683545111&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
x-msnserver: DU7PPFA00D12889
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: 8o7iUTo+dEq+fVa1CdWiAg.0
x-qosstats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
x-throwsite: 4212.9205
x-clienterrorcode: PassportAuthFail
x-errorcodechain: Unauthenticated
x-asmversion: UNKNOWN; 19.1144.414.2011
date: Mon, 08 May 2023 11:25:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moeerrorux.css
200 OK 1.5 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/o/s/161641241013_resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1475
content-type: text/css
last-modified: Thu, 13 Apr 2023 05:23:17 GMT
x-ms-request-id: 9f6ef58e-101e-005d-4cf8-77f513000000
content-encoding: br
date: Mon, 08 May 2023 11:25:11 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d27e81"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moe_status_icons.png
200 OK 6.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced\012- data
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/o/s/161641241013_resources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 6140
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:24:15 GMT
x-ms-request-id: 2b4b35d7-801e-004f-7ae5-6d8ec3000000
date: Mon, 08 May 2023 11:25:11 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d27ee2"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png
200 OK 1.1 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/o/s/161641241013_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 1115
content-type: image/png
last-modified: Thu, 13 Apr 2023 05:23:22 GMT
x-ms-request-id: 1eea704f-301e-0017-64e5-6d569c000000
date: Mon, 08 May 2023 11:25:11 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545111.88d27eed"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
www.onenote.com/officeaddins/learningtools/?et=
200 OK 823 B URL GET HTTP/2 www.onenote.com/officeaddins/learningtools/?et=
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectreverseproxy.onenote.com
FingerprintAE:C8:09:CD:CC:17:F9:9D:F1:58:18:21:8A:F4:A1:59:68:E2:51:BB
ValidityFri, 14 Apr 2023 05:54:53 GMT - Mon, 08 Apr 2024 05:54:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5a9058adbfc67744da54aa9dd62e98c0
55acc3fa56cc3d27a4d8e18ed2cd0b6514c45acf
c035593754f110137840e8c0dc5607d9c71c4b9705cb3da4c3d46ee0f9a5a88a
GET /officeaddins/learningtools/?et= HTTP/1.1
Host: www.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
x-routingofficecluster: weu-000.reverseproxy.onenote.com
x-routingofficefe: ReverseProxyFrontEnd_IN_8
x-routingofficeversion: 16.0.16501.40450
x-routingsessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-routingcorrelationid: 11da2922-32f2-424e-9c73-4e7814e4aae5
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR", CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx"
x-correlationid: 11da2922-32f2-424e-9c73-4e7814e4aae5
x-usersessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-officefe: AgavesFrontEnd_IN_9
x-officeversion: 16.0.16501.40455
x-officecluster: weu-000.appsforoffice.onenote.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
date: Mon, 08 May 2023 11:25:11 GMT
content-length: 823
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683545111&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
200 OK 11 kB URL GET HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1683545111&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectlogin.live.com
FingerprintAC:32:CF:1B:3D:B4:E1:1D:74:B7:6E:1E:74:B6:48:F3:5E:1B:90:C9
ValiditySun, 02 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (24546)
Hash 49088055690fa58c25f1af3944a5285a
5aecf6db974fc630024251ad0d9972a2e28a6168
21ac42d94afa57fe043759d08b063588f8833fe0228609dd0d455be0149aae1b
GET /login.srf?wa=wsignin1.0&rpsnv=13&ct=1683545111&rver=7.5.2116.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Mon, 08 May 2023 11:24:11 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-Frame-Options: DENY
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C106_BL2
x-ms-request-id: 2e4753d4-f075-47fa-86fc-0ff1d6f58a84
PPServer: PPV: 30 H: BL6PPF955138A3B V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=3875c38b3153457b97e86fafe17a73fd; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1683545111&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Sat, 01-Jun-2024 11:25:11 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-6adf98d2-da1f-4718-818e-dadd956c4810; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DdEcWH8bhuynLHCW5REdhvUi8Q9WG*z55AIe0XXBvI8YmWIQxI!6EzOgo7XfaU!PvV3szjnlPHcJLHIMpERKk!M58N5NrKysucHN3Ra4Z6YFox7!xSoDS59eJ3i9M!ptXOQon6!9iUHlPXgyiNKQRYAkFyAffxxah2vB7l3DDVFE07OKdAvNUvgmuf1qCNUJn2NO1xZ1201fmCk52lVRneVQvb!WLyP5Jefu5!3jNNK*E4*ZZg2QpMxp7BOyuo7VTow1NEkg3TTQjSiRPNzxIL1LetgebMJtbwFd7UUFtWwu20kBWH!!gHaN1D3R18*uuseefk7m4glcURJXEXgoAuT00P7ZKU2jP*fn6soEQbZhmWn3NXshO6IJyEetFAZXeWjK8pzJeAdtXxgQqrQp!pFsMSgh8ty!gEu4lhZ62O2q; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Mon, 08 May 2023 11:25:11 GMT
Content-Length: 10861
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 933f8a11a0de025b8d4978a91b3d8ce5
eabee5ad0f6982fe465674a4fbc5547d8e0096b6
15fe159b564d7aea28f48dcb0ad9d32863da9cbff6a9c9707e83f05c773e1155
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: 1705ef36a51840648341da866d62baf8-ddbcd60b-4ce4-48da-96be-ad5f28b48954-8035,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
upload-time: 1683545111701
time-delta-to-apply-millis: 292
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 6946
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; MS0=9ab2292a6a74402dbdf0398dba8eceb2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 334
Access-Control-Allow-Headers: Connection,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:11 GMT
Connection: close
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
200 OK 40 kB URL GET HTTP/2 ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint3E:29:69:36:18:B3:CE:3E:49:31:66:54:82:A6:FA:E9:FE:28:5A:FD
ValidityMon, 11 Jul 2022 00:00:00 GMT - Tue, 11 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 12108007906290015100837a6a61e9f4
1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3
c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4
GET /ajax/jQuery/jquery-3.5.0.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 22413100
cache-control: public,max-age=31536000
content-type: application/javascript
date: Mon, 08 May 2023 11:25:12 GMT
etag: "c844f287112d61:0"
last-modified: Tue, 14 Apr 2020 15:26:14 GMT
server: ECAcc (ska/F6BF)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 39744
X-Firefox-Spdy: h2
appsforoffice.microsoft.com/lib/1.1/hosted/office.js
200 OK 17 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/office.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (32958), with CRLF line terminators
Hash 0d3408e5b6e10c3e45a430580401b5b3
13e5f74b60578cdfa242a896d4d5c2627ef50235
8b10b0fe6a283ea3035b7b03b09bfda03c7d2143c6788d71551382f4f0c30a7b
GET /lib/1.1/hosted/office.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 17111
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
cdn.onenote.net/officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js
200 OK 14 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (32011), with CRLF line terminators
Hash 5a8ed3646a340a247cd48f5732baea69
8a961a2c1461eb5cd8a9009911970824602f8b79
c459ec1608d98a847ab4c83723e1c4b2dc6e58a7006d5566c529a93113c2ee62
GET /officeaddins/161650140455_Scripts/aria-web-telemetry-2.9.0.min.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_4
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: ee3f7d22-9869-4da1-a304-f620c9637b4a
X-RoutingCorrelationId: 57fd51f9-4fb4-4eab-9022-1f32daeb96df
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 57fd51f9-4fb4-4eab-9022-1f32daeb96df
x-usersessionid: ee3f7d22-9869-4da1-a304-f620c9637b4a
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 13498
Cache-Control: public, max-age=30998630
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/BrowserUls.js
200 OK 739 B URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/BrowserUls.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (1922), with no line terminators
Hash 3e3cd75b07b521bc61c01450e2c7873a
57d7881e0e878cabe74b1021cf86126148928de7
2882bf4b22d0ad63e6f8877eb5c22353921e8c87b197911462933b7d1a7a44b8
GET /officeaddins/161650140455_Scripts/BrowserUls.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 084eef23-2c60-48b4-b6ab-793711e9b90b
X-RoutingCorrelationId: ea1a0781-d688-4229-8dde-cf7d66634616
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ea1a0781-d688-4229-8dde-cf7d66634616
x-usersessionid: 084eef23-2c60-48b4-b6ab-793711e9b90b
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 739
Cache-Control: public, max-age=30998584
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js
200 OK 1.5 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with CRLF line terminators
Hash 72d9a825554620c51bf0018a457e7f2e
23400e26c69a1f8a47236ffad4bc80fc80ba773e
365009220d893f07b356c7f253cecd5a9f7e06d6207a3dd7a148fc73812b4fe6
GET /officeaddins/161650140455_Scripts/ExternalResources/js-cookie.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_5
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: ba96ee5b-61e2-40d9-b74b-9958ee04089e
X-RoutingCorrelationId: 81126582-e001-491d-a3a8-66b919b3257a
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 81126582-e001-491d-a3a8-66b919b3257a
x-usersessionid: ba96ee5b-61e2-40d9-b74b-9958ee04089e
x-officefe: AgavesFrontEnd_IN_16
x-officeversion: 16.0.16425.40461
x-officecluster: weu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 1459
Cache-Control: public, max-age=30998570
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/CommonDiagnostics.js
200 OK 12 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/CommonDiagnostics.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (41116)
Hash 08fbff79b5eec28ddff4d772223b81a9
aaabd7e0b32698e8295139c4868e9aee5edbd112
773a678845579e6334f19d4e62f29446e7898bd816359c74574e37884503f909
GET /officeaddins/161650140455_Scripts/CommonDiagnostics.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 81ebae43-86c6-49e3-a5d9-31ab2400541c
X-RoutingCorrelationId: 8001d9e2-73d6-4e54-bec6-5b9a57f69dac
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 8001d9e2-73d6-4e54-bec6-5b9a57f69dac
x-usersessionid: 81ebae43-86c6-49e3-a5d9-31ab2400541c
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 12330
Cache-Control: public, max-age=30998656
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/LearningTools/LearningTools.js
200 OK 6.6 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/LearningTools/LearningTools.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (20082), with no line terminators
Hash 58a30e58fbe0165292f0425b04256e46
420050fe7e6034d52094b2f769fdb12a3591a748
534ecf698946529ff99c868da810dab8e1e9c7491ebdc873bdf95d34abf75c4e
GET /officeaddins/161650140455_Scripts/LearningTools/LearningTools.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_16
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: df938de8-a58b-4bb6-a186-37a8e93e0f6e
X-RoutingCorrelationId: db102769-28e3-440e-9110-c3c5d0e0b6e1
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: db102769-28e3-440e-9110-c3c5d0e0b6e1
x-usersessionid: df938de8-a58b-4bb6-a186-37a8e93e0f6e
x-officefe: AgavesFrontEnd_IN_3
x-officeversion: 16.0.16425.40461
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 6645
Cache-Control: public, max-age=30998592
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/pickadate.min.js
200 OK 7.1 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/pickadate.min.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (20116), with no line terminators
Hash edf023b23dc08c7c90ba27a3bde7480b
0f03edbe6bda20c20251eff9db86359eb5155f66
7337ed6220111758e61f3be5060ae9a807d83edf05d5f7cc92b0b85e34a5fef3
GET /officeaddins/161650140455_Scripts/pickadate.min.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_9
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: fff48d82-831f-4bf1-a7b4-c3eba422a533
X-RoutingCorrelationId: ca95026f-e819-4642-ac04-a815446c66a0
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ca95026f-e819-4642-ac04-a815446c66a0
x-usersessionid: fff48d82-831f-4bf1-a7b4-c3eba422a533
x-officefe: AgavesFrontEnd_IN_9
x-officeversion: 16.0.16425.40461
x-officecluster: weu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 7064
Cache-Control: public, max-age=30998651
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
cdn.onenote.net/officeaddins/161650140455_Scripts/Instrumentation.js
200 OK 1.1 kB URL GET HTTP/1.1 cdn.onenote.net/officeaddins/161650140455_Scripts/Instrumentation.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectcdn.onenote.net
Fingerprint87:FC:05:DF:F0:28:94:58:C6:C4:48:7D:6F:93:44:9E:2B:44:93:2B
ValidityTue, 13 Sep 2022 18:14:24 GMT - Wed, 13 Sep 2023 18:14:24 GMT
File type ASCII text, with very long lines (3527), with no line terminators
Hash df2e618f66e5de074a8070bc09ca3c4f
38f67c978761e4aeaa5341a4ff39c59c1ded221c
bd0dd2b15855be52cba496cc6e8f0ff65fbba6addba92282e53ceca6b27bfcc9
GET /officeaddins/161650140455_Scripts/Instrumentation.js HTTP/1.1
Host: cdn.onenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 01 May 2023 16:32:12 GMT
Accept-Ranges: bytes
ETag: "04e2b7b4a7cd91:0"
Vary: Accept-Encoding
X-RoutingOfficeCluster: neu-000.reverseproxy.onenote.com
X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_0
X-RoutingOfficeVersion: 16.0.16424.40452
X-RoutingSessionId: 911d1735-df0d-4bbc-93fc-311ada8ad09c
X-RoutingCorrelationId: e987d513-aebc-43f3-8762-f3e59128f5b0
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: e987d513-aebc-43f3-8762-f3e59128f5b0
x-usersessionid: 911d1735-df0d-4bbc-93fc-311ada8ad09c
x-officefe: AgavesFrontEnd_IN_0
x-officeversion: 16.0.16501.40455
x-officecluster: neu-000.appsforoffice.onenote.com
x-content-type-options: nosniff
Content-Length: 1077
Cache-Control: public, max-age=30998538
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: https://www.onenote.com
appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
200 OK 127 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (64824), with CRLF line terminators
Size 127 kB (127161 bytes)
Hash d3cc654ce11e484760880b22c9b2d4d4
2b372c93eef829ffe44f1f1bb7579b1ffa073ca9
34176555d7cd7dc4f426647776c81aab59d6e471fcbe352f805f97ab9923554f
GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 127161
Cache-Control: public, max-age=1686
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
200 OK 5.7 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (20946), with CRLF line terminators
Hash 92a3ddf4c14af9eb4db2939a2b2712ac
81b322775a3e9e9335fb780179b6b922759ce6ff
5b6d3f98f8a755878f226b38fdb1f7c31e67b456221f253b70f95aa331668594
GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 5650
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
200 OK 19 kB URL GET HTTP/1.1 appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
IP
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectappsforoffice.microsoft.com
FingerprintCA:AF:85:A2:76:0A:F0:F2:78:04:E2:83:4E:8E:E7:DD:DE:6C:BE:44
ValidityWed, 04 Jan 2023 21:02:02 GMT - Sat, 30 Dec 2023 21:02:02 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 65f960810895837b06b1d3ae1cceaef3
0673f80a70cfb78ad7018e161e3201e80cb71307
f452e6287dafd3b632cbff8533ed5dfc2f6f476c8672b468cf6dcfe321b8c889
GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1
Host: appsforoffice.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 12 Apr 2023 03:36:48 GMT
Accept-Ranges: bytes
ETag: "08db2f06cd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Content-Length: 19004
Cache-Control: public, max-age=9720
Date: Mon, 08 May 2023 11:25:12 GMT
Connection: keep-alive
www.onenote.com/officeaddins/RemoteUls.ashx
200 OK 0 B URL POST HTTP/2 www.onenote.com/officeaddins/RemoteUls.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectreverseproxy.onenote.com
FingerprintAE:C8:09:CD:CC:17:F9:9D:F1:58:18:21:8A:F4:A1:59:68:E2:51:BB
ValidityFri, 14 Apr 2023 05:54:53 GMT - Mon, 08 Apr 2024 05:54:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /officeaddins/RemoteUls.ashx HTTP/1.1
Host: www.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-UserSessionId: 68402e0c-6806-4f40-8c52-9827591a0d71
Content-Length: 511
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/officeaddins/learningtools/?et=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
x-routingofficecluster: weu-000.reverseproxy.onenote.com
x-routingofficefe: ReverseProxyFrontEnd_IN_8
x-routingofficeversion: 16.0.16501.40450
x-routingsessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-routingcorrelationid: c15573b9-5604-451f-94de-fee3597faa66
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: c15573b9-5604-451f-94de-fee3597faa66
x-usersessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-officefe: AgavesFrontEnd_IN_9
x-officeversion: 16.0.16501.40455
x-officecluster: weu-000.appsforoffice.onenote.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-buls-suppressionetag: N/A
x-buls-suppressedtags:
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
date: Mon, 08 May 2023 11:25:12 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2268d13420e0aa0f9b66cb5d019739a7
662a004fc2f4b8d7aac6e1a6edbe0c591e131e5a
58eebbad8ea42cacd6321e80025b549352a7a2daf27795459c8d8f01164178ce
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439
upload-time: 1683545112699
time-delta-to-apply-millis: 292
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 5482
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; MS0=9ab2292a6a74402dbdf0398dba8eceb2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 185
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:12 GMT
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
200 OK 9 B URL POST HTTP/1.1 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a1e74a5b10bc1f2648f657c1b9945cf7
9818ad34dbfc6c3f58293e412364a02871b00464
50250bbc09f470c0a36f6ef540dbfa189af59e689e49aa99e822c2ab6d8f600d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.8
apikey: db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439
upload-time: 1683545113703
time-delta-to-apply-millis: 292
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 12440
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; MS0=9ab2292a6a74402dbdf0398dba8eceb2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 71
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:12 GMT
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback.css
2.8 kB URL res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (20349), with no line terminators
Hash b9f98a9efb94ba729efe1491c87cbdee
636b365a8b74e877133258569c0c99eed2265ad8
5d3437c55261789b29fd009aa4ed3978892cb9fc4b86249c4460e75abb3b78c1
GET /officeonline/o/s/161641241013_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 2840
content-type: text/css
last-modified: Thu, 13 Apr 2023 05:30:15 GMT
x-ms-request-id: 668a0442-a01e-0067-32f8-77ef6b000000
content-encoding: br
date: Mon, 08 May 2023 11:25:20 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545120.88d3dd76"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/o/s/161641241013_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 786
last-modified: Thu, 13 Apr 2023 05:38:37 GMT
x-ms-request-id: 952d8684-d01e-0042-5ef8-774617000000
content-encoding: br
date: Mon, 08 May 2023 11:25:21 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545121.88d3e230"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
1.8 kB URL oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash f4825d353b149597a75313455257deae
8c59750a9706f85db07fee251a8c56780358548f
da80d913a98e390c0fa1e8a261ac4f6cfdadf0e1ee1cf53e6663e2b7d7a52afa
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Wed, 17 May 2023 17:29:35 GMT
Last-Modified: Sun, 07 May 2023 17:09:35 GMT
ETag: "da80d913a98e390c0fa1e8a261ac4f6cfdadf0e1ee1cf53e6663e2b7d7a52afa"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 127E1C4B61FC463BBDA68C6A88F5353F Ref B: OSL30EDGE0113 Ref C: 2023-05-08T11:25:21Z
Date: Mon, 08 May 2023 11:25:20 GMT
oneocsp.microsoft.com/ocsp
1.8 kB URL oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 4ee99ec4e51a8bbdd46f582a746407f7
67267af680cead8c6ba4b4230fcc5c9492597699
2109e6009e1785c8abde4a70b51a9da2b2605c528f785bd35c741053d2a57aff
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Wed, 17 May 2023 17:29:35 GMT
Last-Modified: Sun, 07 May 2023 17:09:35 GMT
ETag: "2109e6009e1785c8abde4a70b51a9da2b2605c528f785bd35c741053d2a57aff"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: D8010A059AF649B7B2637D7347FDB2DD Ref B: OSL30EDGE0308 Ref C: 2023-05-08T11:25:21Z
Date: Mon, 08 May 2023 11:25:21 GMT
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2
0 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-correlationid
Referer: https://euc-onenote.officeapps.live.com/
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 08 May 2023 11:25:21 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: a430df9d16a4786cc822c7e67772867e
x-correlationid: a430df9d-16a4-786c-c822-c7e67772867e
x-machine: OMEXNODE2000004__omexexternal-prod-frc-2-001_4
x-buildversion: 23.4.10427.11732
x-servicefabricrequestid: 5e0416d6-963b-4354-8df2-68ab13adb195
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2
168 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 9c2a7021892a4beae01251664bcdd9a6
80f2214138187490f14e5df7066adf1b8f5ef9f1
553e0349e3e3a0436f0fd94f704e5e84d0036a157ecf22be9818c86d5176aa27
GET /campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.16412.41013&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU4%26TenantId%3D4c05ce4a-540c-43c8-aa4c-11a9846f4290%26SelfTriggerActivity%3D%3Bfloodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight1%3Bonenotefloodgateflight10%3Bonenotefloodgateflight11%3Bonenotefloodgateflight12%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-correlationid: 485453d6-f98d-40f5-e743-8b0b89ffc2b8
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 08 May 2023 11:25:21 GMT
content-type: text/plain; charset=utf-8
server: Microsoft-HTTPAPI/2.0
access-control-allow-origin: *
x-activitytraceid: d69a38499cdc4f156122dfaad29508db
x-correlationid: d69a3849-9cdc-4f15-6122-dfaad29508db
x-machine: OMEXNODE2000004__omexexternal-prod-frc-2-001_4
x-buildversion: 23.4.10427.11732
x-servicefabricrequestid: a1805b24-ec1d-4e5a-ba46-cf9cc8922547
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?build=16.0.16412.41013&waccluster=GEU4&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-BrowserUlsBeacon: [{"Index":8,"MsSinceStart":20989,"Value":"SessionExited","Type":"SessionBoundary"}]
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: f5eab6e4-aa27-4504-b5d7-03f0c17860ad
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00035E90
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
access-control-allow-origin: https://euc-onenote.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00035E90
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F358CE6262DE4036B196C6CD50181C5A Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:22Z
date: Mon, 08 May 2023 11:25:21 GMT
content-length: 0
X-Firefox-Spdy: h2
www.onenote.com/officeaddins/RemoteUls.ashx
200 OK 0 B URL POST HTTP/2 www.onenote.com/officeaddins/RemoteUls.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.onenote.com/officeaddins/learningtools/?et=
Certificate IssuerMicrosoft Corporation
Subjectreverseproxy.onenote.com
FingerprintAE:C8:09:CD:CC:17:F9:9D:F1:58:18:21:8A:F4:A1:59:68:E2:51:BB
ValidityFri, 14 Apr 2023 05:54:53 GMT - Mon, 08 Apr 2024 05:54:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /officeaddins/RemoteUls.ashx HTTP/1.1
Host: www.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-UserSessionId: 68402e0c-6806-4f40-8c52-9827591a0d71
Content-Length: 220
Origin: https://www.onenote.com
DNT: 1
Connection: keep-alive
Referer: https://www.onenote.com/officeaddins/learningtools/?et=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
x-routingofficecluster: weu-000.reverseproxy.onenote.com
x-routingofficefe: ReverseProxyFrontEnd_IN_8
x-routingofficeversion: 16.0.16501.40450
x-routingsessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-routingcorrelationid: f7b7aa07-b5d0-4e15-8e88-09a2a11a3710
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: f7b7aa07-b5d0-4e15-8e88-09a2a11a3710
x-usersessionid: 68402e0c-6806-4f40-8c52-9827591a0d71
x-officefe: AgavesFrontEnd_IN_9
x-officeversion: 16.0.16501.40455
x-officecluster: weu-000.appsforoffice.onenote.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-buls-suppressionetag: N/A
x-buls-suppressedtags:
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
date: Mon, 08 May 2023 11:25:22 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
9 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9da9464f277cec1e86b565e258e17d42
bc933e8672c85b931f16e136994648b5232aa94d
dada35c879e296846b7745644f559d8182cf0e09eaf1c19d5dc0ce423d0ecff4
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4871
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Cookie: MC1=GUID=af88248599bc4b94b2611f9f4cbeb84c&HASH=af88&LV=202305&V=4&LU=1683545106142; MS0=9ab2292a6a74402dbdf0398dba8eceb2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 9
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 267
Access-Control-Allow-Headers: time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com
Access-Control-Expose-Headers: time-delta-millis
Date: Mon, 08 May 2023 11:25:22 GMT
euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteTelemetry.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 16620
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: b5ed9fa4-1330-4509-ad07-cfa67deda5db
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00001687
x-officeversion: 16.0.16412.41013
x-officecluster: PSE1
access-control-allow-origin: https://euc-onenote.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: GVX0EPF00001687
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 6E0BC6887A3A4E5B8042DD25EB2697D2 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:22Z
date: Mon, 08 May 2023 11:25:22 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
200 OK 0 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /o/RemoteUls.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&officeserverversion=16.0.16412.41013 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1320
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d6f6f584-819b-4aa4-8abc-5b425d90afd6
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BDBC
x-officeversion: 16.0.16412.41013
x-officecluster: GEU5
access-control-allow-origin: https://baufirmagebhard-my.sharepoint.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: 023CF1574F186ADD70BE02436D9100AAB57EC129
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8458642,17085210,17085216,17162522,17358857,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23909858,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,50619726,51451613,51492170,51504083,51667010,306230939,306978834,508893266,509096994,509203553,509437535,509743362,510252435,512278607,512278610,512522335,512522337,512522368,520926864,520926865,520979847,521007315,521749855,523613141,524150164,524883107,524883136,524883138,537159041,537159051,537159499,537167070,537169937,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF0000BDBC
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 8AAFD37138AF48C895D94C4B22AECC82 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:22Z
date: Mon, 08 May 2023 11:25:22 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
200 OK 0 B URL POST HTTP/1.1 eu-mobile.events.data.microsoft.com/Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://baufirmagebhard-my.sharepoint.com/personal/info_baufirma-gebhard_it/_layouts/15/Doc.aspx?sourcedoc=%7B89c96e1a-b7ef-47f6-9fc4-353b1d834b71%7D&action=default&slrid=86d4b0a0-b07d-6000-813f-1bbe67c3aef3&originalPath=aHR0cHM6Ly9iYXVmaXJtYWdlYmhhcmQtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvaW5mb19iYXVmaXJtYS1nZWJoYXJkX2l0L0VocHV5WW52dF9aSG44UTFPeDJEUzNFQkFtN1FHcmE5dWlWOUIxN1ZSQi1mUlE_cnRpbWU9N0hOdTNMWlAyMGc&cid=355b3805-cc27-4704-8f1d-7ad89248d57e
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint86:CE:AC:D5:D2:69:45:19:40:AC:AF:81:6D:FF:58:6C:77:0D:A7:EE
ValidityWed, 08 Mar 2023 13:35:44 GMT - Sat, 02 Mar 2024 13:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.9.0&x-apikey=a9e9a63d9df4411ebbf89297947d7666-b5f0498b-a808-4b74-bb7b-2b33f7971660-7417 HTTP/1.1
Host: eu-mobile.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 6945
Origin: https://baufirmagebhard-my.sharepoint.com
DNT: 1
Connection: keep-alive
Referer: https://baufirmagebhard-my.sharepoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 287
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Mon, 08 May 2023 11:25:22 GMT
euc-onenote.officeapps.live.com/o/OneNote.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&waccluster=GEU4&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581101834&haep=1
113 B URL euc-onenote.officeapps.live.com/o/OneNote.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&waccluster=GEU4&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.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.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581101834&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bab5e1c7bd537651b064e9eb401a7ffc
2b86efd5708ef6c29790173ca682d0bbb92cca25
37ee3a7224108a7c22ce751b1466e3faafaa54e2f124d95c8ae491ad1375842a
POST /o/OneNote.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&waccluster=GEU4&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9.eyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ.MRdfn2M5xzXupkkas55WtvRAV-14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9-gdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot-gmB6VycEVtp2NOrTsk7aVp-xYqeidMLC5aUSSuXl7kkO-mxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu-bbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88_G6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581101834&haep=1 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 1801
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 113
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1f17ec31-5267-465c-87b9-f8fe1d388cec
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-wacfrontend: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: F04EF7EE58334D07B0564F4414AB4F71 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:22Z
date: Mon, 08 May 2023 11:25:22 GMT
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/WsaUpload.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&haep=1
122 B URL euc-onenote.officeapps.live.com/o/WsaUpload.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&haep=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /o/WsaUpload.ashx?usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&build=16.0.16412.41013&WacUserType=WOPI&ckey=imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk%3D%2C638191419013951293&haep=1 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Content-Type: text/plain;charset=UTF-8
Content-Length: 7080
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU4-ARRAffinity=c2617b2b699b23fe94a3ecfd95c6db18282da2918c111d9a79c2e25f76a00085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 02160d4d-d9bc-456a-a950-5703dacf0f83
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF0000BDBD
x-officeversion: 16.0.16412.41013
x-officecluster: GEU5
access-control-allow-origin: https://euc-onenote.officeapps.live.com
x-officefd: PA1PEPF0000BDBD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 3CAD7921E2394DF795C87ED6285C2D10 Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:23Z
date: Mon, 08 May 2023 11:25:22 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css
200 OK 440 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 440 kB (440309 bytes)
Hash 9abb3c3a188255e5073b5dd12779a984
b7e6fdd6b849278ae5ecf6e6c4735fa1211a37f6
2370440c296e813c3447201f6e9a491ff4c69716c25cedbe9a8db773650df313
GET /officeonline/o/s/h2370440C296E813C_resources/1033/OneNote.Refresh.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 53783
content-type: text/css
last-modified: Thu, 13 Apr 2023 05:26:40 GMT
x-ms-request-id: 55a43a04-401e-0050-30f8-773dc7000000
content-encoding: br
date: Mon, 08 May 2023 11:25:01 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545101.88d118c2"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js
200 OK 22 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint54:11:4B:DB:98:01:CA:17:06:66:6C:42:F4:E9:9A:41:CB:F1:8A:DE
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (22080)
Hash b0002c7f9d602e7a56681547ac93f5b4
1e48f8fb5444dc4bd855e7599a3f4ace29596502
015c6de00959b6aa81508ad68eb3dca2efd970a9a341c483f8a8a628045390ef
GET /officeonline/o/s/161641241013_App_Scripts/onenoteloadingspinner.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 1625
last-modified: Thu, 13 Apr 2023 05:25:15 GMT
x-ms-request-id: c07cda8a-501e-005c-1ef8-77aacf000000
content-encoding: br
date: Mon, 08 May 2023 11:25:05 GMT
cache-control: max-age=630720000, immutable
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.274f2417.1683545105.88d199d7"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509
101 Switching Protocols 0 B URL GET HTTP/1.1 onenoteonlinesync.onenote.com/onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectonenoteonlinesync.onenote.com
FingerprintC6:49:ED:E3:FF:8F:D1:8F:44:97:AD:2B:00:E5:99:F9:49:AB:03:0F
ValidityMon, 30 Jan 2023 02:26:30 GMT - Thu, 25 Jan 2024 02:26:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onenoteonlinesync/v2/sync?sessionId=24054000-89c0-4d9f-b786-4cfc8a7a8d94&clientVersion=16.0.16412.41013&appModeExtended=EDIT&sessionOrigin=UNKNOWN&hostId=1&version=3&querySignature=WOPIsrc%3Dhttps%253A%252F%252Fbaufirmagebhard%252Dmy%252Esharepoint%252Ecom%252Fpersonal%252Finfo%255Fbaufirma%252Dgebhard%255Fit%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffolders%252F89c96e1ab7ef47f69fc4353b1d834b71%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%252EMRdfn2M5xzXupkkas55WtvRAV%252D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%252DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%252DgmB6VycEVtp2NOrTsk7aVp%252DxYqeidMLC5aUSSuXl7kkO%252DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%252DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%255FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ%26access_token_ttl%3D1683581100509 HTTP/1.1
Host: onenoteonlinesync.onenote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://euc-onenote.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cb+Ox1DJSMcmAZR+1Od98w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Cache-Control: private
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-CorrelationId: 48c8733e-04cf-406b-bd8b-4d67e4371b81
X-UserSessionId: 48c8733e-04cf-406b-bd8b-4d67e4371b81
X-OfficeFE: OneNoteOnlineSyncServiceEngine_IN_8
X-OfficeVersion: 16.0.16501.40455
X-OfficeCluster: neu-002.onenoteonlinesync.onenote.com
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-AspNet-Version: 4.0.30319
Sec-WebSocket-Accept: st/8pgERND283cMSw7CKAV1cRbs=
Connection: Upgrade
X-Powered-By: ASP.NET
Date: Mon, 08 May 2023 11:25:01 GMT
amcdn.msftauth.net/me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell
200 OK 29 kB URL GET HTTP/2 amcdn.msftauth.net/me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint39:26:0C:C1:15:7C:CD:FB:A0:02:79:61:AE:03:2C:85:65:25:BC:7E
ValidityFri, 31 Mar 2023 06:02:02 GMT - Mon, 25 Mar 2024 06:02:02 GMT
File type ASCII text, with very long lines (29173)
Hash 20c8f585b946f97d60272a119f94dba6
26e35a5b734cf79ec259b4c63d746eeb255d5957
98759c9c01fa5690ebdc959b0141f1963b2e5d2edf7bb2b94b55ed842d2ecd41
GET /me?partner=OneNoteOnline&version=10.22274.1&market=EN-US&wrapperId=suiteshell HTTP/1.1
Host: amcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, no-transform, max-age=43200
content-type: application/javascript
content-encoding: br
expires: Mon, 08 May 2023 16:54:20 GMT
x-cache: CONFIG_NOCACHE
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref-originshield: 0GrhYZAAAAAAAFK6pAol9QLqBWEdxQ7lqQU1TMDRFREdFMTgwNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
x-azure-ref: 0FtxYZAAAAAAvqS3DQzUyQZyty34OanJFU1ZHMjBFREdFMDYyMQA5ZmU2YzNmMS0xNzE4LTRhOTMtOTI1NS02M2NkM2Y4Y2E1YWI=
date: Mon, 08 May 2023 11:25:10 GMT
X-Firefox-Spdy: h2
euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%2EeyJhdWQiOiJ3b3BpL2JhdWZpcm1hZ2ViaGFyZC1teS5zaGFyZXBvaW50LmNvbUA0YzA1Y2U0YS01NDBjLTQzYzgtYWE0Yy0xMWE5ODQ2ZjQyOTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTY4MzU0NTEwMCIsImV4cCI6IjE2ODM1ODExMDAiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMzNjdhMzUwZjhkNjdmYWUwNDg0MGQyZTg5MDIyOTczMGFmMGNmM2I4ZmNhYWI2ZGZkYjlhY2ZiMzY1Mjc0NjVlIiwic2hhcmluZ2lkIjoiNW4yU2RscHlQRUdLTU9TWkxwUEVpUSIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiODljOTZlMWFiN2VmNDdmNjlmYzQzNTNiMWQ4MzRiNzE7TU1Jb2RUdWsyeFpwNFNMUjJSVDdxT0dxM2xNPTtEZWZhdWx0O2M1YTczNDRiMzM3MzQyZDE4M2NkY2I3ZGY5YjQ2NTYxOztUcnVlOzs7MTA0ODU3Njs4NmQ0YjBhMC1mMDg5LTYwMDAtN2FiZi01ZjNkZjE3ODY5NDQiLCJmaWQiOiIxODg2NzQifQ%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
200 OK 189 B URL POST HTTP/2 euc-onenote.officeapps.live.com/o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerDigiCert Inc
Subjectofficeapps.live.com
Fingerprint84:2C:B7:48:31:2A:0B:66:6B:A0:48:4C:22:68:EF:1F:EC:A7:EA:85
ValidityTue, 11 Apr 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 66d5e7897a50a43409a3e25015d713c5
8eae0af996352073a499b1109b3d44ee2ec20469
95293d1df0a07477b181b743caa45c794ac1f9bad1f465e724c85a3ce5646627
POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fbaufirmagebhard%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Finfo%5Fbaufirma%2Dgebhard%5Fit%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkNRQU5lRWUtSUxVNTdlSnRZS0N2QVh2b1RkNCJ9%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%2EMRdfn2M5xzXupkkas55WtvRAV%2D14LRH8rPKpO0M8auHvBLEJlICtOSGsS4VSM4DmQQkYpxJIpAWoWgCNqhGpWHjaHHjIhrzbJzdOBwfYTvAvM30jA9%2DgdPw1eCPmapexzXmjwZePNqq7vhi4VDGQtNKgylRot%2DgmB6VycEVtp2NOrTsk7aVp%2DxYqeidMLC5aUSSuXl7kkO%2DmxS9uD3XTXN7OFjlGMyhmXvWxileJlwiAwJsFeBPYUxpQGVM6e7k6w3iTCwmGofXgIpQkBjbpu%2DbbJn4Q3uuhJcA1ghSSIlUbfDOGTVUDnc88%5FG6SMX9IRQvKsA6arQ7TA0SQYdYZwQ&access_token_ttl=1683581100509 HTTP/1.1
Host: euc-onenote.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
X-OfficeVersion: 16.0.16412.41013
X-WacCluster: GEU4
X-WacFrontEnd: PA1PEPF00009463
X-WacUserAgent: MSWACONSync
X-IsCoauthSession: false
X-UserType: WOPI
haep: 1
X-Key: imTku6nonEYmbKzPqSyExZXlaU1dtO9aPxn0hXUgkuk=,638191419013951293
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 42c51030-4ce8-48c9-83d5-f52fc1dfa664
x-usersessionid: 24054000-89c0-4d9f-b786-4cfc8a7a8d94
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: PA1PEPF00009468
x-officeversion: 16.0.16412.41013
x-officecluster: GEU4
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: PA1PEPF00009468
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5
x-msedge-features: typeheadertest,afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5
x-msedge-ref: Ref A: 2DEF4E3197E5484FAB3B197F39E46FFF Ref B: SVG20EDGE0216 Ref C: 2023-05-08T11:25:03Z
date: Mon, 08 May 2023 11:25:02 GMT
X-Firefox-Spdy: h2
js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js
200 OK 90 kB URL GET HTTP/2 js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en%2DUS&rs=it%2DIT&wopisrc=https%3A%2F%2Fbaufirmagebhard-my.sharepoint.com%2Fpersonal%2Finfo_baufirma-gebhard_it%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F89c96e1ab7ef47f69fc4353b1d834b71&wdenableroaming=1&mscc=0&wdodb=1&hid=86D4B0A0-F089-6000-7ABF-5F3DF1786944&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1683545099964&jsapi=1&jsapiver=v1&newsession=1&corrid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&usid=24054000-89c0-4d9f-b786-4cfc8a7a8d94&sftc=1&cac=1&mtf=1&sfp=1&readonly=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected
Certificate IssuerMicrosoft Corporation
Subjectjs.monitor.azure.com
Fingerprint34:24:AA:BB:93:7E:D8:58:CA:9C:33:CA:3F:9A:0F:67:EA:D1:19:02
ValidityThu, 23 Mar 2023 11:01:37 GMT - Sun, 17 Mar 2024 11:01:37 GMT
File type ASCII text, with very long lines (65395)
Hash 465cf01fde453a49a6ea092c656002fb
6cd54cafc5e68a810ba7d3189a0123b9c61d4cc6
7d145b10d4a03fc22a08b2228f403779414c838430ce718ba52fb23e15837e55
GET /scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js HTTP/1.1
Host: js.monitor.azure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euc-onenote.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://euc-onenote.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable, no-transform
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: RlzwH95FOkmm6gksZWAC+w==
last-modified: Thu, 18 Aug 2022 21:40:45 GMT
etag: 0x8DA81624EF9033C
x-cache: TCP_HIT
x-ms-request-id: 876920d1-301e-0081-6556-79e4dc000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 3.2.6
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0UyxLZAAAAACVgJVvGWrHSb+EqAkVv9ZIQU1TMDRFREdFMTgwNgBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
x-azure-ref: 0F9xYZAAAAAATehanAjylTp6Le39qjbduU1ZHMjBFREdFMDUxMgBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
date: Mon, 08 May 2023 11:25:10 GMT
X-Firefox-Spdy: h2
13.107.138.8
13.69.239.72
23.13.245.138
23.36.79.43
40.126.32.67
52.111.231.8
0.0.0.0